2 results · Feed
-
Medium 6.7
Scapy before 2.7.0 Insecure Deserialization RCE via Session Files
Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s opt…
-
Medium 5.3
Scapy before 2.8.0 Uncontrolled Recursion DoS via BER SEQUENCE Decoder
Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQ…