5.3

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tcpdump ≫ Libpcap Version < 1.9.1
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Opensuse ≫ Leap Version15.0
Opensuse ≫ Leap Version15.1
Apple ≫ iPadOS Version13.3
Apple ≫ iPhone OS Version13.3
Apple ≫ macOS X Version >= 10.13 < 10.13.6
Apple ≫ macOS X Version10.13.6 Updatesecurity_update_2019-007
Apple ≫ macOS X Version10.14.6 Updatesecurity_update_2019-002
Apple ≫ macOS X Version10.15.2
Apple ≫ tvOS Version13.3
Apple ≫ watchOS Version6.1.1
Canonical ≫ Ubuntu Linux Version12.04 SwEdition-
Canonical ≫ Ubuntu Linux Version14.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version16.04 SwEditionesm
Canonical ≫ Ubuntu Linux Version18.04 SwEditionlts
Canonical ≫ Ubuntu Linux Version19.04
Fedoraproject ≫ Fedora Version29
Fedoraproject ≫ Fedora Version30
Fedoraproject ≫ Fedora Version31
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.19% 0.782
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

http://seclists.org/fulldisclosure/2019/Dec/26
Third Party Advisory
Mailing List
Issue Tracking
https://seclists.org/bugtraq/2019/Dec/23
Third Party Advisory
Mailing List
https://usn.ubuntu.com/4221-1/
Third Party Advisory
https://usn.ubuntu.com/4221-2/
Third Party Advisory