← Vulnerability feed
Start free
Open in platform
Vulnerability record · CVE-2018-10105 · published 3 October 2019
CVE-2018-10105: Tcpdump improper input validation vulnerability
Tcpdump · Tcpdump
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
9.8 CVSS 3.1 Critical EPSS 3.9% · top 10.2% CWE-20 · Improper input validation
9.8CVSS 3.1 base score, v2 7.5
3.9%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
32References
17 Jun 2026Last modified by NVD
Description
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
Track CVE-2018-10105 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
9.8CVE-2018-10103Tcpdump improper input validation vulnerabilitytcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).EPSS 4.1%9.8CVE-2017-13049Tcpdump out-of-bounds read vulnerabilityThe Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().EPSS 3.4%9.8CVE-2017-13050Tcpdump out-of-bounds read vulnerabilityThe RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().EPSS 4.6%9.8CVE-2017-13051Tcpdump out-of-bounds read vulnerabilityThe RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().EPSS 3.7%9.8CVE-2017-13052Tcpdump out-of-bounds read vulnerabilityThe CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().EPSS 3.4%9.8CVE-2017-13053Tcpdump out-of-bounds read vulnerabilityThe BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().EPSS 3.2%9.8CVE-2017-13054Tcpdump out-of-bounds read vulnerabilityThe LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().EPSS 3.2%9.8CVE-2017-13055Tcpdump out-of-bounds read vulnerabilityThe ISO IS-IS parser in tcpdump before 4.9.2 has a buffer over-read in print-isoclns.c:isis_print_is_reach_subtlv().EPSS 3.2%
Source: NIST National Vulnerability Database (record CVE-2018-10105), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
