aztarna (1.0.0), spruce-sniffer (>=0.1.2, <=0.1.5) potentially affected by CVE-2019-1010142 via scapy (2.4.0)

scapy PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on scapy and may be impacted: - aztarna 1.0.0 - spruce-sniffer =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: OSV:GHSA-MPF2-Q34C-FC6J...

GHSA-MPF2-Q34C-FC6J Infinite Loop in scapy

scapy is affected by a Denial of Service vulnerability resulting in an infinite loop and resource consumption rendering the program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is over the network or in a pcap. both work...

aztarna (1.0.0), spruce-sniffer (>=0.1.2, <=0.1.5) potentially affected by CVE-2019-1010142 via scapy (2.4.0)

scapy PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on scapy and may be impacted: - aztarna 1.0.0 - spruce-sniffer =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: GHSA-MPF2-Q34C-FC6J...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

DEBIAN-CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

PYSEC-2019-120

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

PYSEC-2019-50

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

Code injection

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

aztarna (1.0.0), nailgun-net-check (8.0.12.dev3868) +1 more potentially affected by CVE-2019-1010142 via scapy (>=2.2.0.dev0, <=2.4.0)

scapy PYPI version =2.2.0.dev0, =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: OSV:PYSEC-2019-120...

PYSEC-2019-120

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

CVE-2019-1010142

The CVE-2019-1010142 vulnerability affects scapy 2.4.0, enabling a Denial of Service via the _RADIUSAttrPacketListField component, with an infinite loop/resource consumption and potential unresponsiveness. Attack vectors include network traffic or a pcap. Associated advisories (Fedora/Mageia) con...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

aztarna (1.0.0), spruce-sniffer (>=0.1.2, <=0.1.5) potentially affected by CVE-2019-1010142 via scapy (2.4.0)

scapy PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on scapy and may be impacted: - aztarna 1.0.0 - spruce-sniffer =0.1.2, =0.1.5 Source cves: CVE-2019-1010142 Source advisory: MEND:CVE-2019-1010142...

CVE-2019-1010142

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...

Denial Of Service (DoS)

Scapy is vulnerable to denial of service DoS attacks. It uses a buggy unnecessary class RADIUSAttrPacketListField which does not validate the input when reading the length field in the RADIUS packets Attribute Value Pairs AVP, causing an infinite loop and an application crash. This vulnerability ...

PT-2019-20138

Name of the Vulnerable Software and Affected Versions scapy version 2.4.0 Description The issue is related to a Denial of Service, which can cause an infinite loop, resource consumption, and make the program unresponsive. The component affected is the RADIUSAttrPacketListField.getfieldself...

CVE-2019-1010142: Loop with Unreachable Exit Condition

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfieldself... The attack vector is: over the network or in a pcap. both work...