Vulnerability CVE-2019-15161: Information

Description

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.

Severity: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2019-15161
Published: Oct. 3, 2019
Modified: Nov. 7, 2023
Error type identifier: CWE-131

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
libpcapsisyphus1.9.1-alt11.10.4-alt1ALT-PU-2019-3119-1239373Fixed
libpcapp101.9.1-alt11.9.1-alt2ALT-PU-2019-3119-1239373Fixed
libpcapp91.9.1-alt21.9.1-alt2ALT-PU-2020-3562-1263886Fixed
libpcapc10f11.9.1-alt11.9.1-alt2ALT-PU-2019-3119-1239373Fixed
libpcapc9f21.9.1-alt21.9.1-alt2ALT-PU-2021-1432-1267221Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
  • Product
  • Release Notes
https://www.tcpdump.org/public-cve-list.txt
  • Vendor Advisory
https://github.com/the-tcpdump-group/libpcap/commit/617b12c0339db4891d117b661982126c495439ea
  • Patch
  • Third Party Advisory
https://support.apple.com/kb/HT210788
    20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
      20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
        https://support.apple.com/kb/HT210790
          https://support.apple.com/kb/HT210789
            https://support.apple.com/kb/HT210785
              N/A
                FEDORA-2019-eaa681d33e
                  FEDORA-2019-4fe461079f
                    FEDORA-2019-b92ce3144a

                        1. Configuration 1

                          cpe:2.3:a:tcpdump:libpcap:*:*:*:*:*:*:*:*
                          End excliding
                          1.9.1
                      VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
                      Version: v24.4.2
                      Back to top