scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and
    program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is:
    over the network or in a pcap. both work. (CVE-2019-1010142)

scapy bugfix release

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Fedora 30 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-47946eb312 advisory.

    bugfix bump to version 2.4.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 31 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-20d6b8f9c4 advisory.

    bugfix bump to version 2.4.3

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
422374	SCA: security update for scapy (GHSA-mpf2-q34c-fc6j)	Tenable Cloud Security	SCA Checks	high
422374	SCA: security update for scapy (GHSA-mpf2-q34c-fc6j)	Tenable Self-Hosted Container Security	SCA Checks	high
130076	Fedora 29 : scapy (2019-d49c8ec32b)	Nessus	Fedora Local Security Checks	high
129615	Fedora 30 : scapy (2019-47946eb312)	Nessus	Fedora Local Security Checks	high
129607	Fedora 31 : scapy (2019-20d6b8f9c4)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2019-1010142

high

Tenable Plugins

high

high

high

high

high