Deserialization of Untrusted Data

Overview scapy is a Python-based interactive packet manipulation program and library. Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loadsession process. An attacker can execute arbitrary code by convincing a user to load a malicious .pkl.gz session...

Fedora 30 : scapy (2019-47946eb312)

The remote Fedora 30 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-47946eb312 advisory. bugfix bump to version 2.4.3 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...