DocumentationSeverity
5.0
Medium severity
Details
- CVSS score
- 5.0
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Overview
About vulnerability
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.Details
- Affected product:
- AlmaLinux 9.2 ESU , CentOS 7 ELS , CloudLinux 7 ELS , Oracle Linux 7 ELS , RHEL 7 ELS , TuxCare 9.6 ESU , TuxCare 9.8 ESU
- Affected packages:
- libpcap @ 1.5.3 (+6 more)