~ / search / GHSA-mpf2-q34c-fc6j

GHSA-mpf2-q34c-fc6j

Infinite Loop in scapy

Source: GitHub Advisory Database (reviewed) High CVE-2019-1010142

Packages

EcosystemPackageAffectedFixed in
PyPI scapy >= 2.4-rc1, < 2.4.1 2.4.1

Details

As written in the advisory (Markdown source, shown as plain text).

scapy is affected by a Denial of Service vulnerability resulting in an infinite loop and resource consumption rendering the program unresponsive. The component is: `_RADIUSAttrPacketListField.getfield(self..)`. The attack vector is over the network or in a pcap. both work.

References

External links from the advisory. They lead to third-party sites.