GitHub Advisoryadvisory · PyPI

GHSA-mpf2-q34c-fc6j Infinite Loop in scapy

HIGH Published 2019-07-22 Modified 2024-10-22 Official page ↗
Aliases
CVE-2019-1010142
Ecosystem
PyPI
Packages
scapy
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-835
Reviewed
2019-07-22

Affected packages

• PyPI scapy: >= 2.4-rc1, < 2.4.1 → fixed in 2.4.1

Description

scapy is affected by a Denial of Service vulnerability resulting in an infinite loop and resource consumption rendering the program unresponsive. The component is: `_RADIUSAttrPacketListField.getfield(self..)`. The attack vector is over the network or in a pcap. both work.

Related

Alias · CVE (1)

Weakness · CWE (1)

  • CWE-835 Loop with Unreachable Exit Condition weakness

References