CVE-2019-15161
Fixed in a distro release EPSS 3%
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.
Products: tcpdump libpcap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libpcap | 1.1.1-r0 |
| Alpine 3.12 | libpcap | 1.9.1-r0 |
| Alpine 3.13 | libpcap | 1.9.1-r0 |
| Alpine 3.14 | libpcap | 1.9.1-r0 |
| Alpine 3.15 | libpcap | 1.9.1-r0 |
| Alpine 3.16 | libpcap | 1.9.1-r0 |
| Alpine 3.17 | libpcap | 1.9.1-r0 |
| Alpine 3.18 | libpcap | 1.9.1-r0 |
| Alpine 3.19 | libpcap | 1.9.1-r0 |
| Alpine 3.20 | libpcap | 1.9.1-r0 |
| Alpine 3.21 | libpcap | 1.9.1-r0 |
| Alpine 3.22 | libpcap | 1.9.1-r0 |
| Alpine 3.23 | libpcap | 1.9.1-r0 |
| Alpine 3.24 | libpcap | 1.9.1-r0 |
| Debian 12 | libpcap | 1.9.1-1 |
| Debian 13 | libpcap | 1.9.1-1 |
| Debian 14 | libpcap | 1.9.1-1 |