CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2019-15165
Medium (5.3). EPSS 2.8% chance of exploitation in the next 30 days.
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Severity
- EPSS
- 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
- CWE
- CWE-770
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:ipados
- apple:iphone_os
- apple:mac_os_x
- apple:tvos
- apple:watchos
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- opensuse:leap
- oracle:communications_operations_monitor
- tcpdump:libpcap
References
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html
- http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html
- http://seclists.org/fulldisclosure/2019/Dec/26
- https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
- https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab