critical
CVE-2018-10103
tcpdump: SMB data printing mishandled
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Trivy's own label is CRITICAL. Rated critical by NVD, Photon OS. Rated lower by Red Hat (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
tcpdump before 4.9.3 mishandles the printing of SMB data (issue 1 of 2).
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | tcpdump | 4.9.3-1.ph1 |
| Photon OS 2.0 | tcpdump | 4.9.3-1.ph2 |
| Photon OS 3.0 | tcpdump | 4.9.3-1.ph3 |
| alpine 3.10 | tcpdump | 4.9.3-r0 |
| alpine 3.11 | tcpdump | 4.9.3-r0 |
| alpine 3.12 | tcpdump | 4.9.3-r0 |
| alpine 3.13 | tcpdump | 4.9.3-r0 |
| alpine 3.14 | tcpdump | 4.9.3-r0 |
| alpine 3.15 | tcpdump | 4.9.3-r0 |
| alpine 3.16 | tcpdump | 4.9.3-r0 |
| alpine 3.17 | tcpdump | 4.9.3-r0 |
| alpine 3.18 | tcpdump | 4.9.3-r0 |
Show all 38 entries from 37 sources
| Source | Package | Fixed in |
|---|---|---|
| Photon OS 1.0 | tcpdump | 4.9.3-1.ph1 |
| Photon OS 2.0 | tcpdump | 4.9.3-1.ph2 |
| Photon OS 3.0 | tcpdump | 4.9.3-1.ph3 |
| alpine 3.10 | tcpdump | 4.9.3-r0 |
| alpine 3.11 | tcpdump | 4.9.3-r0 |
| alpine 3.12 | tcpdump | 4.9.3-r0 |
| alpine 3.13 | tcpdump | 4.9.3-r0 |
| alpine 3.14 | tcpdump | 4.9.3-r0 |
| alpine 3.15 | tcpdump | 4.9.3-r0 |
| alpine 3.16 | tcpdump | 4.9.3-r0 |
| alpine 3.17 | tcpdump | 4.9.3-r0 |
| alpine 3.18 | tcpdump | 4.9.3-r0 |
| alpine 3.19 | tcpdump | 4.9.3-r0 |
| alpine 3.20 | tcpdump | 4.9.3-r0 |
| alpine 3.21 | tcpdump | 4.9.3-r0 |
| alpine 3.22 | tcpdump | 4.9.3-r0 |
| alpine 3.23 | tcpdump | 4.9.3-r0 |
| alpine 3.24 | tcpdump | 4.9.3-r0 |
| alpine 3.9 | tcpdump | 4.9.3-r0 |
| alpine edge | tcpdump | 4.9.3-r0 |
| debian 10 | tcpdump | 4.9.3-1~deb10u1 |
| debian 11 | tcpdump | 4.9.3-1 |
| debian 12 | tcpdump | 4.9.3-1 |
| debian 13 | tcpdump | 4.9.3-1 |
| debian 14 | tcpdump | 4.9.3-1 |
| debian 8 | tcpdump | 4.9.3-1~deb8u1 |
| debian 9 | tcpdump | 4.9.3-1~deb9u1 |
| echo | tcpdump | 4.9.3-1 |
| Oracle Linux 8 | tcpdump | 14:4.9.3-1.el8 |
| Red Hat | tcpdump | no fix listed |
| rocky 8 | tcpdump | 4:4.9.3-1.el8 |
| seal Red Hat 6 | seal-tcpdump | 14:4.0.0-11.20090921gitdf3cb4.2.el6+sp999 |
| seal Red Hat 6 | tcpdump | 14:4.0.0-11.20090921gitdf3cb4.2.el6+sp999 |
| ubuntu 14.04-ESM | tcpdump | 4.9.3-0ubuntu0.14.04.1+esm1 |
| ubuntu 16.04 | tcpdump | 4.9.3-0ubuntu0.16.04.1 |
| ubuntu 16.04-ESM | tcpdump | 4.9.3-0ubuntu0.16.04.1 |
| ubuntu 18.04 | tcpdump | 4.9.3-0ubuntu0.18.04.1 |
| ubuntu 18.04-ESM | tcpdump | 4.9.3-0ubuntu0.18.04.1 |
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00050.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00053.html
- http://seclists.org/fulldisclosure/2019/Dec/26
- https://access.redhat.com/errata/RHSA-2020:4760
- https://access.redhat.com/security/cve/CVE-2018-10103
- https://bugzilla.redhat.com/show_bug.cgi?id=1760430
- https://bugzilla.redhat.com/show_bug.cgi?id=1760445
- https://bugzilla.redhat.com/show_bug.cgi?id=1760447
All 76 references
- https://bugzilla.redhat.com/show_bug.cgi?id=1760449
- https://bugzilla.redhat.com/show_bug.cgi?id=1760453
- https://bugzilla.redhat.com/show_bug.cgi?id=1760455
- https://bugzilla.redhat.com/show_bug.cgi?id=1760457
- https://bugzilla.redhat.com/show_bug.cgi?id=1760458
- https://bugzilla.redhat.com/show_bug.cgi?id=1760461
- https://bugzilla.redhat.com/show_bug.cgi?id=1760463
- https://bugzilla.redhat.com/show_bug.cgi?id=1760464
- https://bugzilla.redhat.com/show_bug.cgi?id=1760468
- https://bugzilla.redhat.com/show_bug.cgi?id=1760504
- https://bugzilla.redhat.com/show_bug.cgi?id=1760505
- https://bugzilla.redhat.com/show_bug.cgi?id=1760506
- https://bugzilla.redhat.com/show_bug.cgi?id=1760507
- https://bugzilla.redhat.com/show_bug.cgi?id=1760509
- https://bugzilla.redhat.com/show_bug.cgi?id=1760512
- https://bugzilla.redhat.com/show_bug.cgi?id=1760513
- https://bugzilla.redhat.com/show_bug.cgi?id=1760514
- https://bugzilla.redhat.com/show_bug.cgi?id=1760516
- https://bugzilla.redhat.com/show_bug.cgi?id=1760517
- https://bugzilla.redhat.com/show_bug.cgi?id=1760518
- https://bugzilla.redhat.com/show_bug.cgi?id=1760520
- https://bugzilla.redhat.com/show_bug.cgi?id=1804063
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10103
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10105
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14461
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14462
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14463
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14464
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14465
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14466
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14467
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14468
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14469
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14470
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14879
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14880
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14881
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14882
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16227
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16228
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16229
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16230
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16300
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16451
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-16452
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-15166
- https://errata.rockylinux.org/RLSA-2020:4760
- https://github.com/the-tcpdump-group/tcpdump/blob/tcpdump-4.9/CHANGES
- https://linux.oracle.com/cve/CVE-2018-10103.html
- https://linux.oracle.com/errata/ELSA-2020-4760.html
- https://lists.debian.org/debian-lts-announce/2019/10/msg00015.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/62XY42U6HY3H2APR5EHNWCZ7SAQNMMJN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNYXF3IY2X65IOD422SA6EQUULSGW7FN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R2UDPOSGVJQIYC33SQBXMDXHH4QDSDMU/
- https://nvd.nist.gov/vuln/detail/CVE-2018-10103
- https://seclists.org/bugtraq/2019/Dec/23
- https://seclists.org/bugtraq/2019/Oct/28
- https://security.netapp.com/advisory/ntap-20200120-0001/
- https://support.apple.com/kb/HT210788
- https://support.f5.com/csp/article/K44551633?utm_source=f5support&%3Butm_medium=RSS
- https://ubuntu.com/security/notices/USN-4252-1
- https://ubuntu.com/security/notices/USN-4252-2
- https://usn.ubuntu.com/4252-1/
- https://usn.ubuntu.com/4252-2/
- https://www.cve.org/CVERecord?id=CVE-2018-10103
- https://www.debian.org/security/2019/dsa-4547
- https://www.tcpdump.org/tcpdump-changes.txt