Vulnerability GHSA-mpf2-q34c-fc6j
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
7 years ago
July 22, 2019 at 02:53 PM UTC
Infinite Loop in scapy
2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0
2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0
Summary
Infinite Loop in scapy
Details
scapy is affected by a Denial of Service vulnerability resulting in an infinite loop and resource consumption rendering the program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is over the network or in a pcap. both work.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
1 year ago
Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization
2.2.0-dev and 2.3.1 - 2.3.3 and 2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0 - 2.4.3rc1 and 2.4.3rc2 and 2.4.3rc3 and 2.4.3rc4 and 2.4.3 - 2.4.4rc1 and 2.4.4rc2 and 2.4.4 - 2.4.5rc1 and 2.4.5 - 2.5.0rc1 and 2.5.0rc2 and 2.5.0rc3 and 2.5.0 - 2.6.0rc1 and 2.6.0rc2 and 2.6.0 - 2.6.1 GHSA-cq46-m9x9-j8w2
2.2.0-dev and 2.3.1 - 2.3.3 and 2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0 - 2.4.3rc1 and 2.4.3rc2 and 2.4.3rc3 and 2.4.3rc4 and 2.4.3 - 2.4.4rc1 and 2.4.4rc2 and 2.4.4 - 2.4.5rc1 and 2.4.5 - 2.5.0rc1 and 2.5.0rc2 and 2.5.0rc3 and 2.5.0 - 2.6.0rc1 and 2.6.0rc2 and 2.6.0 - 2.6.1 GHSA-cq46-m9x9-j8w2
Unknown
7 years ago
No summary available
2.2.0-dev and 2.3.1 - 2.3.3 and 2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0 PYSEC-2019-120
2.2.0-dev and 2.3.1 - 2.3.3 and 2.4rc2 and 2.4.0rc3 and 2.4.0rc4 and 2.4.0rc5 and 2.4.0 PYSEC-2019-120
Impacted packages
Timeline
Published
7 years ago
July 22, 2019 at 02:53 PM UTC
Last Modified
2 years ago
October 22, 2024 at 05:15 PM UTC