CVE-2018-16451

Description

The SMB parser in tcpdump before 4.9.3 has buffer over-reads in print-smb.c:print_trans() for MAILSLOTBROWSE and PIPELANMAN.

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.474

Vulnerability	OS Platform
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2	Mac
Multiple vulnerabilities are fixed in MacOS Catalina 10.15.2 Combo Update	Mac
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_i386.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb9u1_amd64.deb	Linux
tcpdump security update(DSA-4547-1) tcpdump_4.9.3-1~deb10u1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.16.04.1_amd64.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_i386.deb	Linux
command-line network traffic analyzer (USN-4252-1) tcpdump_4.9.3-0ubuntu0.18.04.1_amd64.deb	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-4.9.3-1.el8.x86_64.rpm	Linux
(RHSA-2020:4760) tcpdump security, bug fix, and enhancement update tcpdump-debugsource-4.9.3-1.el8.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debuginfo-4.9.2-14.17.1.x86_64.rpm	Linux
SUSE-SU-2020:3360-1(SUSE Linux Enterprise Server 12-SP5 ) tcpdump-debugsource-4.9.2-14.17.1.x86_64.rpm	Linux
Out-of-bounds Read Vulnerability (CVE-2018-16451)	NCM

Click to see the patches provided by ManageEngine for this CVE

Patch ID	Patch Description
PATCH-602673	MacOS Catalina 10.15.7 - Auto Reboot
PATCH-602674	macOS Catalina 10.15.7 Combo Update - Auto Reboot