CVE-2019-15165 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
mitre	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	5.3 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 80%

Vendor	Product	Version
tcpdump	libpcap	𝑥 < 1.9.1
debian	debian_linux	8.0
debian	debian_linux	9.0
opensuse	leap	15.0
opensuse	leap	15.1
oracle	communications_operations_monitor	3.4
oracle	communications_operations_monitor	4.0
oracle	communications_operations_monitor	4.1
oracle	communications_operations_monitor	4.2
oracle	communications_operations_monitor	4.3
apple	ipados	13.3
apple	iphone_os	13.3
apple	mac_os_x	10.13 ≤ 𝑥 < 10.13.6
apple	mac_os_x	10.13.6:security_update_2019-007
apple	mac_os_x	10.14.6:security_update_2019-002
apple	mac_os_x	10.15.2
apple	tvos	13.3
apple	watchos	6.1.1
canonical	ubuntu_linux	12.04
canonical	ubuntu_linux	14.04
canonical	ubuntu_linux	16.04
canonical	ubuntu_linux	18.04
canonical	ubuntu_linux	19.04

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libpcap

bullseye	1.10.0-2 fixed
bookworm	1.10.3-1 fixed
sid	1.10.5-1 fixed
trixie	1.10.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

libpcap

eoan	not-affected
disco	Fixed 1.8.1-6ubuntu1.19.04.1 released
bionic	Fixed 1.8.1-6ubuntu1.18.04.1 released
xenial	Fixed 1.7.4-2ubuntu0.1 released
trusty	Fixed 1.5.3-2ubuntu0.1 released

Common Weakness Enumeration

CWE-770 - Allocation of Resources Without Limits or Throttling
The software allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

References

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html

http://seclists.org/fulldisclosure/2019/Dec/26

https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES

https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab

https://github.com/the-tcpdump-group/libpcap/commit/a5a36d9e82dde7265e38fe1f87b7f11c461c29f6

https://lists.debian.org/debian-lts-announce/2019/10/msg00031.html

https://lists.debian.org/debian-lts-announce/2021/12/msg00014.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/

https://seclists.org/bugtraq/2019/Dec/23

https://support.apple.com/kb/HT210785

https://support.apple.com/kb/HT210788

https://support.apple.com/kb/HT210789

https://support.apple.com/kb/HT210790

https://usn.ubuntu.com/4221-1/

https://usn.ubuntu.com/4221-2/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.tcpdump.org/public-cve-list.txt

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00051.html

http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00052.html

http://seclists.org/fulldisclosure/2019/Dec/26

https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES

https://github.com/the-tcpdump-group/libpcap/commit/87d6bef033062f969e70fa40c43dfd945d5a20ab

https://github.com/the-tcpdump-group/libpcap/commit/a5a36d9e82dde7265e38fe1f87b7f11c461c29f6

https://lists.debian.org/debian-lts-announce/2019/10/msg00031.html

https://lists.debian.org/debian-lts-announce/2021/12/msg00014.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/

https://seclists.org/bugtraq/2019/Dec/23

https://support.apple.com/kb/HT210785

https://support.apple.com/kb/HT210788

https://support.apple.com/kb/HT210789

https://support.apple.com/kb/HT210790

https://usn.ubuntu.com/4221-1/

https://usn.ubuntu.com/4221-2/

https://www.oracle.com/security-alerts/cpuapr2020.html

https://www.tcpdump.org/public-cve-list.txt