Описание
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Отчет
A Low Impact has been given to this flaw even though the CVSSv3 is 7.5, because libpcap library is mainly used as part of debugging tools like wireshark or tcpdump, where an impact to the Availability is not considered security relevant in a reasonable scenario.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | libpcap | Out of support scope | ||
| Red Hat Enterprise Linux 7 | libpcap | Fix deferred | ||
| Red Hat Enterprise Linux 8 | libpcap | Fixed | RHSA-2020:4547 | 04.11.2020 |
Показывать по
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB ...
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
ELSA-2020-4547: libpcap security, bug fix, and enhancement update (LOW)
EPSS
7.5 High
CVSS3