PT-2019-11535 · Mageia+1 · Scapy

Published 2019-07-18 · Updated 2020-06-16 · CVE-2019-1010262

OSV

Updated scapy packages fix security vulnerabilities:

A vulnerability was found in scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The component is: RADIUSAttrPacketListField class. The attack vector is: a packet sent over the network or in a pcap (CVE-2019-1010262).

scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work (CVE-2019-1010142).

Related Identifiers

CVE-2019-1010262

MGASA-2020-0266

Affected Products

Scapy

References · 10

• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/GICTAGUAV4OGIAPKKWXSEVIXU7DZEJ2V · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-1010262 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2020-0266 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1010262 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-1010262 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2020-0266.html · Security Note
• https://cve.org/CVERecord?id=CVE-2019-1010262 · Security Note
• https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058 · Note
• https://imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending · Note
• https://bugs.mageia.org/show_bug.cgi?id=25954 · Note