Summary
It was discovered that libpcap did not properly validate PHB headers in
some situations. An attacker could use this to cause a denial of service
(memory exhaustion).
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | libpcap | 1.7.4-2ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | libpcap | 1.8.1-6ubuntu1.18.04.1 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | libpcap | 1.5.3-2ubuntu0.1 |
Vulnerabilities 1
-
Medium 5.3
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
References
-
report
https://ubuntu.com/security/CVE-2019-15165