Denial of Service Vulnerability in Scapy by Secdev
CVE-2019-1010142

7.5HIGH

Key Information:

Vendor

Secdev

Status
Scapy
Vendor
CVE Published:
19 July 2019

What is CVE-2019-1010142?

Scapy version 2.4.0 is impacted by a Denial of Service vulnerability that can lead to an infinite loop and excessive resource consumption, ultimately causing the program to become unresponsive. This vulnerability can be exploited over a network or through a pcap file, making it critical for users to apply updates or patches to prevent potential disruptions in service.

Affected Version(s)

scapy 2.4.0

References

https://github.com/secdev/scapy/pull/1409/files#diff-441e...
x_refsource_MISC
https://www.imperva.com/blog/scapy-sploit-python-network-...
x_refsource_MISC
https://github.com/secdev/scapy/pull/1409
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.