CVE-2019-15162

CVE-2019-15162 affects libpcap before 1.9.1 on non-Windows platforms. The rpcapd daemon may disclose authentication failure details, which could aid attackers in enumerating valid usernames. Public documents confirm updates to libpcap (to 1.9.1) across platforms (e.g., Apple iOS/watchOS/tvOS secu...

CVE-2019-15162

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames...

CVE-2019-15161

The CVE-2019-15161 entry affects libpcap prior to 1.9.1. Root cause: a variable reuse leads to mishandling of certain length values, which may allow an attack vector involving extra data at the end of a request. Affected products/contexts appear in multiple advisories (euleros, OpenVAS/Nessus lis...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...

CVE-2019-15163

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service NULL pointer dereference and daemon crash if a crypt call fails...

CVE-2019-15164

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source...

CVE-2019-15161

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request...