PF_RING icon indicating copy to clipboard operation
PF_RING copied to clipboard

[Security] tcpdump used in this project is vulnerable

Open the-Chain-Warden-thresh opened this issue 1 year ago • 0 comments

CVE-2023-1801 is a security vulnerability in tcpdump. The root cause of this CVE is that directly calling strftime() in printers may result in a buffer overflow if the buffer isn't big enough for the string. Although the CVE decription in NVD said that this CVE only affected tcpdump 4.99.3, I do find that some functions in tcpdump 4.99.1, which is used in this project directly call strftime(). As far as I'm concerned, every function modified in this patch exists in tcpdump 4.99.1, which means you can easily fix this vulnerability by applying this patch.

the-Chain-Warden-thresh avatar Jan 31 '24 12:01 the-Chain-Warden-thresh