← Vulnerability feed

Vulnerability record · CVE-2023-1801 · published 7 April 2023

CVE-2023-1801: Tcpdump out-of-bounds write vulnerability

Tcpdump · Tcpdump

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

6.5 CVSS 3.1 Medium EPSS 0.84% · top 43.8% CWE-787 · Out-of-bounds write
6.5CVSS 3.1 base score
0.84%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
14References
17 Jun 2026Last modified by NVD

Description

The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc Patch
https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501 Patch
https://lists.fedoraproject.org/archives/list/[email protected]/message/KOA2BJFERAC3VRQIRHJOWN4HZ
https://lists.fedoraproject.org/archives/list/[email protected]/message/WYL5DEVHRJYF2CM5LTCZKEYFY
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZLLZCG23MU6O4QOG2CX3DLEL3
https://support.apple.com/kb/HT213844
https://support.apple.com/kb/HT213845
https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc Patch
https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501 Patch
https://lists.fedoraproject.org/archives/list/[email protected]/message/KOA2BJFERAC3VRQIRHJOWN4HZ
https://lists.fedoraproject.org/archives/list/[email protected]/message/WYL5DEVHRJYF2CM5LTCZKEYFY
https://lists.fedoraproject.org/archives/list/[email protected]/message/ZLLZCG23MU6O4QOG2CX3DLEL3
https://support.apple.com/kb/HT213844
https://support.apple.com/kb/HT213845

Track CVE-2023-1801 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2018-10103Tcpdump improper input validation vulnerabilitytcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).EPSS 4.1%9.8CVE-2018-10105Tcpdump improper input validation vulnerabilitytcpdump before 4.9.3 mishandles the printing of SMB data (issue 2 of 2).EPSS 3.9%9.8CVE-2017-13049Tcpdump out-of-bounds read vulnerabilityThe Rx protocol parser in tcpdump before 4.9.2 has a buffer over-read in print-rx.c:ubik_print().EPSS 3.4%9.8CVE-2017-13050Tcpdump out-of-bounds read vulnerabilityThe RPKI-Router parser in tcpdump before 4.9.2 has a buffer over-read in print-rpki-rtr.c:rpki_rtr_pdu_print().EPSS 4.6%9.8CVE-2017-13051Tcpdump out-of-bounds read vulnerabilityThe RSVP parser in tcpdump before 4.9.2 has a buffer over-read in print-rsvp.c:rsvp_obj_print().EPSS 3.7%9.8CVE-2017-13052Tcpdump out-of-bounds read vulnerabilityThe CFM parser in tcpdump before 4.9.2 has a buffer over-read in print-cfm.c:cfm_print().EPSS 3.4%9.8CVE-2017-13053Tcpdump out-of-bounds read vulnerabilityThe BGP parser in tcpdump before 4.9.2 has a buffer over-read in print-bgp.c:decode_rt_routing_info().EPSS 3.2%9.8CVE-2017-13054Tcpdump out-of-bounds read vulnerabilityThe LLDP parser in tcpdump before 4.9.2 has a buffer over-read in print-lldp.c:lldp_private_8023_print().EPSS 3.2%

Source: NIST National Vulnerability Database (record CVE-2023-1801), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.