Input validation error in libpcap - CVE-2019-15161
Published: October 27, 2019
Vulnerability identifier: #VU22308
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2019-15161
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to insufficient validation of user-supplied input within the rpcapd/daemon.c in libpcap. A remote attacker can send specially crafted request to the application and gain access to sensitive information.
Affected software
libpcap
libpcap (Alpine package)
libpcap
Oracle Solaris
Fedora
libpcap (Alpine package)
libpcap
Oracle Solaris
Fedora
How to mitigate CVE-2019-15161
Install updates from vendor's website.
libpcap - update to 1.9.1
libpcap (Alpine package) - update to 1.9.1-r0
libpcap - addressed in versions 1.9.1-1.fc29, 1.9.1-1.fc30, 1.9.1-1.fc31
libpcap (Alpine package) - update to 1.9.1-r0
libpcap - addressed in versions 1.9.1-1.fc29, 1.9.1-1.fc30, 1.9.1-1.fc31
External References
- https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
- https://github.com/the-tcpdump-group/libpcap/commit/617b12c0339db4891d117b661982126c495439ea
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/
- https://www.tcpdump.org/public-cve-list.txt