ISOMAN

CVE

CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

Severity
MEDIUM
CVSS
5.3
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html
  2. http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html
  3. http://seclists.org/fulldisclosure/2019/Dec/26
  4. https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
  5. https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab
  6. https://github.com/the-tcpdump-group/libpcap/commit/a5a36d9e82dde7265e38fe1f87b7f11c461c29f6
  7. https://lists.debian.org/debian-lts-announce/2019/10/msg00031.html
  8. https://lists.debian.org/debian-lts-announce/2021/12/msg00014.html
  9. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/
  10. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/
  11. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/
  12. https://seclists.org/bugtraq/2019/Dec/23
  13. https://support.apple.com/kb/HT210785
  14. https://support.apple.com/kb/HT210788
  15. https://support.apple.com/kb/HT210789
  16. https://support.apple.com/kb/HT210790
  17. https://usn.ubuntu.com/4221-1/
  18. https://usn.ubuntu.com/4221-2/
  19. https://www.oracle.com/security-alerts/cpuapr2020.html
  20. https://www.tcpdump.org/public-cve-list.txt