CVE-2019-15165

The CVE-2019-15165 issue affects libpcap: sf-pcapng.c in libpcap before 1.9.1 fails to validate PHB header length before memory allocation, enabling potential memory exhaustion. Confirmed references from multiple advisories indicate the vulnerability is addressed by upgrading to libpcap 1.9.1 or ...

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory...

CVE-2019-15164

CVE-2019-15164 affects libpcap (rpcapd/daemon.c). The issue allows an SSRF by providing a URL as a capture source in libpcap before version 1.9.1. EulerOS/OpenVAS entries confirm libpcap 1.9.1 as the fix. Remediation: upgrade to libpcap 1.9.1 or newer to address this vulnerability. If exploiting ...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15163

CVE-2019-15163 concerns libpcap prior to 1.9.1. The rpcapd/daemon.c path allows a denial of service via a NULL pointer dereference if a crypt() call fails. This is part of a set of vulnerabilities in libpcap before 1.9.1 (RPCAP daemon handling and related length reuse issues) that can cause crash...

CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

CVE-2019-15162

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...

CVE-2019-15162

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...

CVE-2019-15162

CVE-2019-15162 affects libpcap before 1.9.1 on non-Windows platforms. The rpcapd daemon may disclose authentication failure details, which could aid attackers in enumerating valid usernames. Public documents confirm updates to libpcap (to 1.9.1) across platforms (e.g., Apple iOS/watchOS/tvOS secu...

CVE-2019-15162

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...

CVE-2019-15161

The CVE-2019-15161 entry affects libpcap prior to 1.9.1. Root cause: a variable reuse leads to mishandling of certain length values, which may allow an attack vector involving extra data at the end of a request. Affected products/contexts appear in multiple advisories (euleros, OpenVAS/Nessus lis...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

[slackware-security] tcpdump

New libpcap and tcpdump packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libpcap-1.9.1-i586-1slack14.2.txz: Upgraded. This update is required for the new version of tcpdump...

Slackware 14.0 / 14.1 / 14.2 / current : tcpdump (SSA:2019-274-01)

New libpcap and tcpdump packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix security issues. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2019-274-01. The text itself is copyright C...