CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

Denial Of Service (DoS)

libpcap.so is vulnerable to denial of service DoS. rpcapd/daemon.c uses a crypt call which causes a NULL pointer dereference and daemon crash upon failure...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15164

CVE-2019-15164 affects libpcap (rpcapd/daemon.c). The issue allows an SSRF by providing a URL as a capture source in libpcap before version 1.9.1. EulerOS/OpenVAS entries confirm libpcap 1.9.1 as the fix. Remediation: upgrade to libpcap 1.9.1 or newer to address this vulnerability. If exploiting ...

CVE-2019-15162

CVE-2019-15162 affects libpcap before 1.9.1 on non-Windows platforms. The rpcapd daemon may disclose authentication failure details, which could aid attackers in enumerating valid usernames. Public documents confirm updates to libpcap (to 1.9.1) across platforms (e.g., Apple iOS/watchOS/tvOS secu...

CVE-2019-15161

The CVE-2019-15161 entry affects libpcap prior to 1.9.1. Root cause: a variable reuse leads to mishandling of certain length values, which may allow an attack vector involving extra data at the end of a request. Affected products/contexts appear in multiple advisories (euleros, OpenVAS/Nessus lis...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2007-3373

daemon.c in cman redhat-cluster-suite before 20070622 does not clear a buffer for reading requests, which might allow local users to obtain sensitive information from previous requests...