CVE-2019-15165
Fixed in a distro release EPSS 3%CVSS 5.3
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Products: tcpdump libpcap, debian_linux, opensuse leap, oracle communications_operations_monitor, apple ipados, apple iphone_os, apple mac_os_x, apple tvos, apple watchos, canonical ubuntu_linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libpcap-devel | 14:1.9.1-4.el8 |
| Alpine 3.10 | libpcap | 1.1.1-r0 |
| Alpine 3.12 | libpcap | 1.9.1-r0 |
| Alpine 3.13 | libpcap | 1.9.1-r0 |
| Alpine 3.14 | libpcap | 1.9.1-r0 |
| Alpine 3.15 | libpcap | 1.9.1-r0 |
| Alpine 3.16 | libpcap | 1.9.1-r0 |
| Alpine 3.17 | libpcap | 1.9.1-r0 |
| Alpine 3.18 | libpcap | 1.9.1-r0 |
| Alpine 3.19 | libpcap | 1.9.1-r0 |
| Alpine 3.20 | libpcap | 1.9.1-r0 |
| Alpine 3.21 | libpcap | 1.9.1-r0 |
| Alpine 3.22 | libpcap | 1.9.1-r0 |
| Alpine 3.23 | libpcap | 1.9.1-r0 |
| Alpine 3.24 | libpcap | 1.9.1-r0 |
| Debian 12 | libpcap | 1.9.1-1 |
| Debian 13 | libpcap | 1.9.1-1 |
| Debian 14 | libpcap | 1.9.1-1 |
| Debian 8 | libpcap | 1.6.2-2+deb8u1 |
| Debian 9 | libpcap | 1.8.1-3+deb9u1 |
| Red Hat Enterprise Linux 8 | libpcap | 14:1.9.1-4.el8 |
| Red Hat Enterprise Linux 8 | libpcap-debuginfo | 14:1.9.1-4.el8 |
| Red Hat Enterprise Linux 8 | libpcap-debugsource | 14:1.9.1-4.el8 |
| Red Hat Enterprise Linux 8 | libpcap-devel | 14:1.9.1-4.el8 |
| SUSE Enterprise Storage 4 | libpcap | 1.8.1-10.3.1 |
| SUSE Enterprise Storage 4 | tcpdump | 4.9.2-14.14.1 |
| SUSE Enterprise Storage 5 | libpcap | 1.8.1-10.3.1 |
| SUSE Enterprise Storage 5 | tcpdump | 4.9.2-14.14.1 |
| SUSE HPE Helion OpenStack 8 | libpcap | 1.8.1-10.3.1 |
| SUSE HPE Helion OpenStack 8 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Desktop 12 SP4 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Module for Basesystem 15 | libpcap | 1.8.1-4.3.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP1 | libpcap | 1.8.1-4.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP1-LTSS | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP2-BCL | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP2-LTSS | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP3-BCL | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP3-LTSS | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP4 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP4 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server 12 SP5 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server 12 SP5 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP1 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP4 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | tcpdump | 4.9.2-14.14.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP4 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP4 | libpcap | 1.8.1-10.3.1 |
| SUSE Linux Enterprise Workstation Extension 12 SP5 | libpcap | 1.8.1-10.3.1 |
| SUSE OpenStack Cloud 7 | libpcap | 1.8.1-10.3.1 |
| SUSE OpenStack Cloud 7 | tcpdump | 4.9.2-14.14.1 |
| SUSE OpenStack Cloud 8 | libpcap | 1.8.1-10.3.1 |
| SUSE OpenStack Cloud 8 | tcpdump | 4.9.2-14.14.1 |
| SUSE OpenStack Cloud Crowbar 8 | libpcap | 1.8.1-10.3.1 |
| SUSE OpenStack Cloud Crowbar 8 | tcpdump | 4.9.2-14.14.1 |
| Ubuntu 16.04 LTS | libpcap | 1.7.4-2ubuntu0.1 |
| Ubuntu 18.04 LTS | libpcap | 1.8.1-6ubuntu1.18.04.1 |
| Ubuntu Pro 14.04 LTS | libpcap | 1.5.3-2ubuntu0.1 |
| openSUSE Leap 15.0 | libpcap | 1.8.1-lp150.3.3.1 |
| openSUSE Leap 15.1 | libpcap | 1.8.1-lp151.4.3.1 |