Skip to content
OpenAdvisories

Package · PyPI

scapy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-cq46-m9x9-j8w2

    Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization

    ### Summary An unsafe deserialization vulnerability in Scapy <v2.7.0 allows attackers to execute arbitrary code **when a malicious session file is locally loaded via the `-s` option**. This requires convincing a user to manually load a malicious session file.…

    scapy PyPI
  • High 7.5
    CVE-2019-1010142

    Infinite Loop in scapy

    scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work.

    SecDev scapy scapy scapy Debian PyPI