Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Johnathan Azaria

Researcher fromImperva
#37757of 56,330
7.5Total CVSS
Vulnerabilities · 1
PT-2019-11477
7.5
2019-07-19
Secdev · Scapy · CVE-2019-1010142
Name of the Vulnerable Software and Affected Versions: scapy version 2.4.0 Description: The issue is a Denial of Service that results in an infinite loop, resource consumption, and the program becoming unresponsive. The component affected is the ` RADIUSAttrPacketListField.getfield(self..)` function. The attack vector can be over the network or via a pcap file, with both methods being effective. Recommendations: For scapy version 2.4.0, consider disabling the ` RADIUSAttrPacketListField.getfield(self..)` function as a temporary workaround to prevent potential exploitation until a patch is available. Restrict access to the network and limit the use of pcap files to minimize the risk of exploitation.