Updated scapy packages fix security vulnerabilities: A vulnerability was found in scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The component is: . MGASA-2020-0266 - Updated scapy packages fix security vulnerability Publication date: 16 Jun 2020 URL: https://advisories.mageia.org/MGASA-2020-0266.html Type: security Affected Mageia releases: 7 CVE: CVE-2019-1010142, CVE-2019-1010262 Updated scapy packages fix security vulnerabilities: A vulnerability was found in scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The component is: _RADIUSAttrPacketListField class. The attack vector is: a packet sent over the network or in a pcap (CVE-2019-1010262). scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work (CVE-2019-1010142). References: - https://bugs.mageia.org/show_bug.cgi?id=25954 - https://lists.fedoraproject.org/archives/list/
bugfix bump to version 2.4.3. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2019-20d6b8f9c4 2019-10-06 00:00:39.812589 --------------------------------------------------------------------------------Name : scapy Product : Fedora 31 Version : 2.4.3 Release : 1.fc31 URL : https://scapy.net/ Summary : Interactive packet manipulation tool and network scanner Description : Scapy is a powerful interactive packet manipulation program built on top of the Python interpreter. It can be used to forge or decode packets of a wide number of protocols, send them over the wire, capture them, match requests and replies, and much more. --------------------------------------------------------------------------------Update Information: bugfix bump to version 2.4.3 --------------------------------------------------------------------------------References: [ 1 ] Bug #1735535 - CVE-2019-1010262 scapy: denial of service in _RADIUSAttrPacketListField [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1735535 [ 2 ] Bug #1732352 - CVE-2019-1010142 scapy: lack of input validation in port numbers leads to DoS [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1732352 [ 3 ] Bug #1685882 - scapy-2.4.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=1685882 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2019-20d6b8f9c4' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.