Skip to content
OpenAdvisories

Package · Ubuntu

scapy

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.7

    Scapy before 2.7.0 Insecure Deserialization RCE via Session Files

    Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s opt…

  • Medium 5.3

    Scapy before 2.8.0 Uncontrolled Recursion DoS via BER SEQUENCE Decoder

    Scapy before 2.8.0 contains an uncontrolled recursion vulnerability in the BER/ASN.1 decoder in scapy/asn1/ber.py that allows unauthenticated remote attackers to crash parsing applications. Attackers can send a single 833-byte packet with 250 nested ASN.1 SEQ…