CVE-2018-16451

high
New! CVE Severity Now Using CVSS v3

The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Description

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for \MAILSLOT\BROWSE and \PIPE\LANMAN.

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html

http://seclists.org/fulldisclosure/2019/Dec/26

https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES

https://github.com/the-tcpdump-group/tcpdump/commit/96480ab95308cd9234b4f09b175ebf60e17792c6

https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html

https://lists.fedoraproject.org/archives/list/[email protected]/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/

https://lists.fedoraproject.org/archives/list/[email protected]/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/

https://lists.fedoraproject.org/archives/list/[email protected]/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/

https://seclists.org/bugtraq/2019/Dec/23

https://seclists.org/bugtraq/2019/Oct/28

https://security.netapp.com/advisory/ntap-20200120-0001/

https://support.apple.com/kb/HT210788

https://www.debian.org/security/2019/dsa-4547

Details

Source: MITRE

Published: 2019-10-03

Updated: 2020-01-20

Type: CWE-125

Risk Information

CVSS v2

Base Score: 5

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Impact Score: 2.9

Exploitability Score: 10

Severity: MEDIUM

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score: 3.6

Exploitability Score: 3.9

Severity: HIGH

Vulnerable Software

Configuration 1

OR

cpe:2.3:a:tcpdump:tcpdump:*:*:*:*:*:*:*:*

Configuration 2

OR

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

Tenable Plugins

View all (27 total)

IDNameProductFamilySeverity
150563SUSE SLES11 Security Update : tcpdump (SUSE-SU-2019:14191-1)NessusSuSE Local Security Checks
critical
147275NewStart CGSL MAIN 6.02 : tcpdump Multiple Vulnerabilities (NS-SA-2021-0082)NessusNewStart CGSL Local Security Checks
critical
143787SUSE SLES12 Security Update : tcpdump (SUSE-SU-2020:3360-1)NessusSuSE Local Security Checks
critical
142765Oracle Linux 8 : tcpdump (ELSA-2020-4760)NessusOracle Linux Local Security Checks
critical
142444RHEL 8 : tcpdump (RHSA-2020:4760)NessusRed Hat Local Security Checks
critical
138231F5 Networks BIG-IP : Multiple tcpdump vulnerabilities (K44551633)NessusF5 Networks Local Security Checks
critical
135566EulerOS 2.0 SP3 : tcpdump (EulerOS-SA-2020-1437)NessusHuawei Local Security Checks
critical
133291Ubuntu 16.04 LTS / 18.04 LTS : tcpdump vulnerabilities (USN-4252-1)NessusUbuntu Local Security Checks
critical
132826EulerOS Virtualization for ARM 64 3.0.5.0 : tcpdump (EulerOS-SA-2020-1072)NessusHuawei Local Security Checks
critical
132733AIX 7.2 TL 4 : tcpdump (IJ20786)NessusAIX Local Security Checks
critical
132732AIX 7.2 TL 3 : tcpdump (IJ20785)NessusAIX Local Security Checks
critical
132731AIX 7.2 TL 2 : tcpdump (IJ20784)NessusAIX Local Security Checks
critical
132730AIX 7.1 TL 5 : tcpdump (IJ20783)NessusAIX Local Security Checks
critical
131957macOS 10.15.x < 10.15.2 / 10.14.x < 10.14.6 Security Update 2019-002 / 10.13.x < 10.13.6 Security Update 2019-007NessusMacOS X Local Security Checks
high
131825EulerOS 2.0 SP5 : tcpdump (EulerOS-SA-2019-2551)NessusHuawei Local Security Checks
high
131371EulerOS 2.0 SP8 : tcpdump (EulerOS-SA-2019-2305)NessusHuawei Local Security Checks
critical
130370Fedora 31 : 14:tcpdump (2019-6db0d5b9d9)NessusFedora Local Security Checks
critical
130321Fedora 30 : 14:tcpdump (2019-d06bc63433)NessusFedora Local Security Checks
critical
130308Fedora 29 : 14:tcpdump (2019-85d92df70f)NessusFedora Local Security Checks
critical
130135Debian DSA-4547-1 : tcpdump - security updateNessusDebian Local Security Checks
critical
130122Photon OS 3.0: Tcpdump PHSA-2019-3.0-0034NessusPhotonOS Local Security Checks
critical
130118Photon OS 2.0: Tcpdump PHSA-2019-2.0-0182NessusPhotonOS Local Security Checks
critical
130086openSUSE Security Update : tcpdump (openSUSE-2019-2348)NessusSuSE Local Security Checks
critical
130083openSUSE Security Update : tcpdump (openSUSE-2019-2344)NessusSuSE Local Security Checks
critical
129966SUSE SLED15 / SLES15 Security Update : tcpdump (SUSE-SU-2019:2674-1)NessusSuSE Local Security Checks
critical
129828Debian DLA-1955-1 : tcpdump security updateNessusDebian Local Security Checks
critical
129521Slackware 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2019-274-01)NessusSlackware Local Security Checks
critical