CVE-2019-15162
Fixed in a distro release EPSS 2%
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
Products: tcpdump libpcap
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | libpcap | 1.1.1-r0 |
| Alpine 3.12 | libpcap | 1.9.1-r0 |
| Alpine 3.13 | libpcap | 1.9.1-r0 |
| Alpine 3.14 | libpcap | 1.9.1-r0 |
| Alpine 3.15 | libpcap | 1.9.1-r0 |
| Alpine 3.16 | libpcap | 1.9.1-r0 |
| Alpine 3.17 | libpcap | 1.9.1-r0 |
| Alpine 3.18 | libpcap | 1.9.1-r0 |
| Alpine 3.19 | libpcap | 1.9.1-r0 |
| Alpine 3.20 | libpcap | 1.9.1-r0 |
| Alpine 3.21 | libpcap | 1.9.1-r0 |
| Alpine 3.22 | libpcap | 1.9.1-r0 |
| Alpine 3.23 | libpcap | 1.9.1-r0 |
| Alpine 3.24 | libpcap | 1.9.1-r0 |
| Debian 12 | libpcap | 1.9.1-1 |
| Debian 13 | libpcap | 1.9.1-1 |
| Debian 14 | libpcap | 1.9.1-1 |