CVE-2019-15165

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging.

The following packages have been upgraded to a later upstream version: libpcap (1.9.1). (BZ#1806422)

Security Fix(es):

• libpcap: Resource exhaustion during PHB header length validation (CVE-2019-15165)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Updated libpcap and tcpdump packages fix security vulnerabilities:

The libpcap packages have been updated to versions 1.9.1 and tcpdump to 4.9.3, respectively, fixing several buffer overread and overflow issues.

This update for libpcap fixes the following issues:

• CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
• CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

This update was imported from the SUSE:SLE-15:Update update project.

This update for libpcap fixes the following issues:

• CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
• CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

This update was imported from the SUSE:SLE-15:Update update project.

This update for libpcap fixes the following issues:

• CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
• CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

This update for libpcap fixes the following issues:

• CVE-2019-15165: Added sanity checks for PHB header length before allocating memory (bsc#1153332).
• CVE-2018-16301: Fixed a buffer overflow (bsc#1153332).

It was discovered that libpcap did not properly validate PHB headers in some situations. An attacker could use this to cause a denial of service (memory exhaustion).