Denial of Service in libpcap
Summary
CVE-2019-15163: rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. Affects libpcap across 2 version ranges.
< 1.1.1-r0
< 437b273761adedcbd880f714bfa44afeec186a31
Fixed in 1.1.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libpcap is a library used for capturing network traffic. It provides a high-level interface for packet capture and analysis. The library is commonly used by network monitoring tools, packet sniffers, and intrusion detection systems. However, a vulnerability has been discovered in libpcap that can lead to a denial of service (DoS) condition.
Vulnerability Detail
The vulnerability, identified as CVE-2019-15163, exists in the rpcapd/daemon.c file of libpcap versions prior to 1.9.1. It can be exploited by attackers to cause a NULL pointer dereference and crash the daemon if a crypt() call fails. This vulnerability can be triggered remotely, potentially allowing an attacker to disrupt network monitoring and analysis activities. The Common Vulnerability Scoring System (CVSS) score for this vulnerability is 7.5, indicating a high severity.
How To Fix
Minimum fixed version
1.1.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade libpcapTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in libpcap can lead to a denial of service condition, potentially impacting network monitoring and analysis activities. It is crucial to update libpcap to version 1.9.1 or later to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libpcap →
FAQ
libpcap is a library used for capturing network traffic and is commonly used by network monitoring tools, packet sniffers, and intrusion detection systems.
The vulnerability can lead to a denial of service (DoS) condition, potentially disrupting network monitoring and analysis activities.
To fix this vulnerability, update libpcap to version 1.9.1 or later.
Users can obtain the updated version from the official libpcap GitHub repository or through package managers specific to their operating system.
No specific workaround has been provided for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for libpcap.
