Lucene search

K
ubuntucveUbuntu.comUB:CVE-2019-15165
HistorySep 30, 2019 - 12:00 a.m.

CVE-2019-15165

2019-09-3000:00:00
ubuntu.com
ubuntu.com
12

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.005 Low

EPSS

Percentile

76.7%

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB
header length before allocating memory.

Bugs

Notes

Author Note
sbeattie this is likely actually fixed by 617b12c0339db4891d117b661982126c495439ea see github issue about CVE ID confusion but whatever, can’t get a straight answer out of upstream, so will use this CVE ID for the issue that touches sf-pcapng.c
OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibpcap< 1.8.1-6ubuntu1.18.04.1UNKNOWN
ubuntu19.04noarchlibpcap< 1.8.1-6ubuntu1.19.04.1UNKNOWN
ubuntu14.04noarchlibpcap< 1.5.3-2ubuntu0.1UNKNOWN
ubuntu16.04noarchlibpcap< 1.7.4-2ubuntu0.1UNKNOWN

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

0.005 Low

EPSS

Percentile

76.7%