PT-2018-3814 · Tcpdump+7 · Libpcap+7

Published 2018-08-01 · Updated 2025-12-03 · CVE-2019-15165

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions libpcap versions prior to 1.9.1

Description The issue is related to the sf-pcapng.c component in the libpcap library, which does not properly validate the PHB header length before allocating memory. This allows a remote attacker to impact data integrity.

Recommendations For versions prior to 1.9.1, update to version 1.9.1 or later to resolve the issue.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

ALSA-2020:4547

ALT-PU-2019-3119

ALT-PU-2020-3562

ALT-PU-2021-1432

BDU:2022-05681

CESA-2020_4547

CVE-2019-15165

DLA-1967-1

DLA-2850-1

MGASA-2019-0297

OPENSUSE-SU-2019:2343-1

OPENSUSE-SU-2019:2345-1

OPENSUSE-SU-2019_2343-1

OPENSUSE-SU-2019_2345-1

RHSA-2020:4547

RHSA-2020_4547

SUSE-SU-2019:2669-1

SUSE-SU-2019:2673-1

USN-4221-1

USN-4221-2

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Red Hat

Suse

Ubuntu

Libpcap

References · 61

• https://github.com/the-tcpdump-group/libpcap/commit/a5a36d9e82dde7265e38fe1f87b7f11c461c29f6 · Patch
• https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-15165 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2019-15165 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3 · Vendor Advisory
• https://tcpdump.org/public-cve-list.txt · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2669-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2019-15165 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-15165 · Security Note
• https://osv.dev/vulnerability/CVE-2019-15165 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-15165 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2343-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1967-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4221-2 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2019-0297 · Vendor Advisory