CVE-2019-15165

Опубликовано: 03 окт. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2019/Dec/26
Issue Tracking
Mailing List
Third Party Advisory
https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
Product
Release Notes
https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab
Patch
Third Party Advisory
https://github.com/the-tcpdump-group/libpcap/commit/a5a36d9e82dde7265e38fe1f87b7f11c461c29f6
Patch
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/10/msg00031.html
Mailing List
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00014.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/
https://seclists.org/bugtraq/2019/Dec/23
Mailing List
Third Party Advisory
https://support.apple.com/kb/HT210785
Third Party Advisory
https://support.apple.com/kb/HT210788
Third Party Advisory
https://support.apple.com/kb/HT210789
Third Party Advisory
https://support.apple.com/kb/HT210790
Third Party Advisory
https://usn.ubuntu.com/4221-1/
Third Party Advisory
https://usn.ubuntu.com/4221-2/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html
Third Party Advisory
https://www.tcpdump.org/public-cve-list.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tcpdump:libpcap:*:*:*:*:*:*:*:*

Версия до 1.9.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*

cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_operations_monitor:4.1:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_operations_monitor:4.2:*:*:*:*:*:*:*

cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:o:apple:ipados:13.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:iphone_os:13.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия от 10.13 (включая) до 10.13.6 (исключая)

cpe:2.3:o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:10.15.2:*:*:*:*:*:*:*

cpe:2.3:o:apple:tvos:13.3:*:*:*:*:*:*:*

cpe:2.3:o:apple:watchos:6.1.1:*:*:*:*:*:*:*

Конфигурация 6

Одно из

cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*

Конфигурация 7

Одно из

cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:31:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01191

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770

Связанные уязвимости

CVE-2019-15165

CVSS3: 5.3

ubuntu

больше 6 лет назад

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

CVE-2019-15165

CVSS3: 7.5

redhat

больше 6 лет назад

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

CVE-2019-15165

CVSS3: 5.3

debian

больше 6 лет назад

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB ...

GHSA-4jh3-696v-qm6r

CVSS3: 5.3

github

больше 3 лет назад

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

ELSA-2020-4547

oracle-oval

около 5 лет назад

ELSA-2020-4547: libpcap security, bug fix, and enhancement update (LOW)

EPSS

Процентиль: 78%

0.01191

Низкий

5.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-770