Secdev · Scapy · CVE-2019-1010142
Name of the Vulnerable Software and Affected Versions:
scapy version 2.4.0
Description:
The issue is a Denial of Service that results in an infinite loop, resource consumption, and the program becoming unresponsive. The component affected is the ` RADIUSAttrPacketListField.getfield(self..)` function. The attack vector can be over the network or via a pcap file, with both methods being effective.
Recommendations:
For scapy version 2.4.0, consider disabling the ` RADIUSAttrPacketListField.getfield(self..)` function as a temporary workaround to prevent potential exploitation until a patch is available. Restrict access to the network and limit the use of pcap files to minimize the risk of exploitation.