5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
90.0%
Software: libpcap 1.5.3
OS: Cobalt 7.9
CVE-ID: CVE-2019-15165
CVE-Crit: MEDIUM
CVE-DESC: sf-pcapng.c in libpcap before 1.9.1 incorrectly checks the length of the PHB header before allocating memory.
CVE-STATUS: default
CVE-REV: default
CVE-ID: CVE-2019-15161
CVE-Crit: MEDIUM
CVE-DESC: rpcapd / daemon.c in libpcap before 1.9.1 incorrectly handles certain length values due to variable reuse. This could open an attack vector that includes additional data at the end of the request.
CVE-STATUS: default
CVE-REV: default
CVE-ID: CVE-2019-15163
CVE-Crit: HIGH
CVE-DESC: rpcapd / daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (null pointer dereferencing and daemon crash) if the crypt () call fails.
CVE-STATUS: default
CVE-REV: default
CVE-ID: CVE-2019-15164
CVE-Crit: MEDIUM
CVE-DESC: rpcapd / daemon.c in libpcap before 1.9.1 allows SSRF because a URL can be provided as a capture source.
CVE-STATUS: default
CVE-REV: default
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.9 Medium
AI Score
Confidence
Low
0.024 Low
EPSS
Percentile
90.0%