PT-2019-4099 · Tcpdump+7 · Tcpdump+7
Publicado
2019-09-30
·
Atualizado
2024-06-15
·
CVE-2018-10105
CVSS v2.0
10
Crítica
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
tcpdump versions prior to 4.9.3
Description
The issue is related to insufficient input validation in the tcpdump utility, which can be exploited by a remote attacker to gain unauthorized access to information and compromise its integrity and availability. The vulnerability specifically affects the handling of SMB data and is also related to a heap-based buffer over-read.
Recommendations
For versions prior to 4.9.3, update to version 4.9.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the tcpdump utility to minimize the risk of exploitation.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Ibm Aix
Red Hat
Rocky Linux
Suse
Ubuntu
Tcpdump