{"id":"CVE-2019-1010262","aliases":["EUVD-2019-2001","GHSA-8pg4-727r-q6p7","MGASA-2020-0266","UBUNTU-CVE-2019-1010262"],"status":"rejected","title":"scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The...","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-07-18T16:27:14Z","modified":"2026-04-16T04:43:07Z","affected":[{"source":"osv","ecosystem":"Mageia:7","package":"scapy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-3.1.mga7"}]}],"bundled":2}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1010262"},{"url":"https://github.com/secdev/scapy/pull/1409/files#diff-441eff981e466959968111fc6314fe93L1058","tags":["report"]},{"url":"https://www.imperva.com/blog/scapy-sploit-python-network-tool-is-vulnerable-to-denial-of-service-dos-attack-cve-pending/","tags":["report"]},{"url":"https://github.com/advisories/GHSA-8pg4-727r-q6p7"},{"url":"https://advisories.mageia.org/MGASA-2020-0266.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=25954","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/GICTAGUAV4OGIAPKKWXSEVIXU7DZEJ2V/","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2019-1010262","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-1010262","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2019-1010262","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-07-18T16:27:14Z","modified":"2019-07-21T01:54:39Z","updated_at":"2026-11-02T14:20:24.989116Z"}],"euvd":[{"id":"EUVD-2019-2001","description":"DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"published","published":"2019-07-18T16:27:14Z","modified":"2019-07-21T01:54:39Z","updated_at":"2026-11-03T03:51:29.418182Z"}],"ghsa":[{"id":"GHSA-8pg4-727r-q6p7","title":"scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The...","description":"scapy 2.4.0 and earlier is affected by: Denial of Services. The impact is: busy loop forever. The component is: _RADIUSAttrPacketListField class. The attack vector is: a packet sent over the network or in a pcap. The fixed version is: after commit 0d7ae2b039f650a40e511d09eb961c782da025d9.","status":"published","published":"2022-05-24T16:50:39Z","modified":"2023-01-28T05:06:19Z","updated_at":"2026-11-02T14:44:25.398405Z"}],"nvd":[{"id":"CVE-2019-1010262","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage","status":"rejected","published":"2019-07-18T17:15:11.71Z","modified":"2023-11-07T03:02:18.737Z","updated_at":"2026-11-02T14:05:20.616405Z"}],"osv":[{"id":"MGASA-2020-0266","title":"Updated scapy packages fix security vulnerability","description":"Updated scapy packages fix security vulnerabilities:\n\nA vulnerability was found in scapy 2.4.0 and earlier is affected by:\nDenial of Services. The impact is: busy loop forever. The component\nis:\n_RADIUSAttrPacketListField class. The attack vector is: a packet sent\nover the network or in a pcap (CVE-2019-1010262).\n\nscapy 2.4.0 is affected by: Denial of Service. The impact is: infinite\nloop, resource consumption and program unresponsive. The component is:\n_RADIUSAttrPacketListField.getfield(self..). The attack vector is: over\nthe network or in a pcap. both work (CVE-2019-1010142).\n","status":"published","published":"2020-06-16T07:45:15Z","modified":"2026-04-16T04:43:07.345687703Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"UBUNTU-CVE-2019-1010262","description":"** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-1010142. Reason: This candidate is a reservation duplicate of CVE-2019-1010142. Notes: All CVE users should reference CVE-2019-1010142 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.","status":"withdrawn","published":"2019-07-18T17:15:00Z","modified":"2025-07-08T14:59:39.360624Z","updated_at":"2026-11-02T15:54:18.772093Z"}]}}