CVE-2017-12893

Critical

Published: 14/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The SMB/CIFS parser in tcpdump before version 4.9.2 has a buffer over-read in smbutil.c:name_len().

Exploitation of this vulnerability may lead to unauthorized access to data or disclosure of sensitive information.

It is recommended to update tcpdump to version 4.9.2 or later to mitigate this vulnerability.

Original NVD description (English source)

The SMB/CIFS parser in tcpdump before 4.9.2 has a buffer over-read in smbutil.c:name_len().