Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Koby Kilimnik

Researcher fromImperva
#36693of 53,630
7.5Total CVSS
Vulnerabilities · 1
PT-2019-11477
7.5
2019-07-19
Secdev · Scapy · CVE-2019-1010142
Name of the Vulnerable Software and Affected Versions: scapy version 2.4.0 Description: The issue is a Denial of Service that results in an infinite loop, resource consumption, and the program becoming unresponsive. The component affected is the ` RADIUSAttrPacketListField.getfield(self..)` function. The attack vector can be over the network or via a pcap file, with both methods being effective. Recommendations: For scapy version 2.4.0, consider disabling the ` RADIUSAttrPacketListField.getfield(self..)` function as a temporary workaround to prevent potential exploitation until a patch is available. Restrict access to the network and limit the use of pcap files to minimize the risk of exploitation.