CVE-2023-1801: Input Validation

Reference Links

• https://support.apple.com/en-us/HT213843 (Advisory)
• https://support.apple.com/en-us/HT213844 (Advisory)
• https://support.apple.com/en-us/HT213845 (Advisory)
• https://github.com/the-tcpdump-group/tcpdump/commit/7578e1c04ee280dda50c4c2813e7d55f539c6501
• https://github.com/the-tcpdump-group/tcpdump/commit/03c037bbd75588beba3ee09f26d17783d21e30bc
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KOA2BJFERAC3VRQIRHJOWN4HZY4ZA7CH/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WYL5DEVHRJYF2CM5LTCZKEYFYDZAIZSN/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLLZCG23MU6O4QOG2CX3DLEL3YXP6LAI/
• https://support.apple.com/kb/HT213844
• https://support.apple.com/kb/HT213845

Parent vulnerabilities

(Appears in the following advisories)

• HT213844
• HT213845
• HT213843

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-40442
• CVE-2023-34425
• CVE-2023-32364
• CVE-2023-35983
• CVE-2023-40392
• CVE-2023-34241
• CVE-2023-28319
• CVE-2023-28320
• CVE-2023-28321
• CVE-2023-28322
• CVE-2023-32416
• CVE-2023-41990
• CVE-2023-36854
• CVE-2023-32418
• CVE-2023-38603
• CVE-2023-38590
• CVE-2023-38598
• CVE-2023-36495
• CVE-2023-37285
• CVE-2023-38604
• CVE-2023-32381
• CVE-2023-32433
• CVE-2023-35993
• CVE-2023-38606
• CVE-2023-32441
• CVE-2023-38565
• CVE-2023-38593
• CVE-2023-40440
• CVE-2023-38571
• CVE-2023-38421
• CVE-2023-38258
• CVE-2023-1916
• CVE-2023-29491
• CVE-2023-38601
• CVE-2023-32444
• CVE-2023-2953
• CVE-2023-42829
• CVE-2023-38259
• CVE-2023-38602
• CVE-2023-42831
• CVE-2023-32442
• CVE-2023-32443
• CVE-2023-42832
• CVE-2023-32422
• CVE-2023-32429
• CVE-2023-1801
• CVE-2023-2426
• CVE-2023-2609
• CVE-2023-2610
• CVE-2023-38605
• CVE-2023-40439
• CVE-2023-38616
• CVE-2023-38580
• CVE-2023-36862
• CVE-2023-42828
• CVE-2023-40437
• CVE-2022-3970
• CVE-2023-28200
• CVE-2023-32734
• CVE-2023-38261
• CVE-2023-38424
• CVE-2023-38425
• CVE-2023-38410
• CVE-2023-38609
• CVE-2023-38564
• CVE-2023-32654
• CVE-2023-38608
• CVE-2023-40397
• CVE-2023-38572
• CVE-2023-38599
• CVE-2023-32445
• CVE-2023-38592
• CVE-2023-38594
• CVE-2023-38595
• CVE-2023-38600
• CVE-2023-38611
• CVE-2023-37450
• CVE-2023-42866
• CVE-2023-38597
• CVE-2023-38133

Frequently Asked Questions

• What is the severity of CVE-2023-1801?

  The severity of CVE-2023-1801 is medium with a severity value of 6.5.

• How does CVE-2023-1801 affect tcpdump?

  CVE-2023-1801 affects tcpdump version 4.99.3.

• What is the impact of CVE-2023-1801?

  CVE-2023-1801 can result in an out-of-bounds write when decoding a crafted network packet.

• How can I fix CVE-2023-1801 in tcpdump?

  To fix CVE-2023-1801, it is recommended to update tcpdump to a version that includes the necessary fixes.

• Where can I find more information about CVE-2023-1801?

  You can find more information about CVE-2023-1801 on the official GitHub page and the Fedora project mailing list.