CVE-2019-15162
Apple Security Advisory 2019-12-10-3
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
El archivo rpcapd/daemon.c en libpcap versiones anteriores a 1.9.1, en plataformas diferentes de Windows proporciona detalles sobre por qué falló la autenticación, lo que podría hacer más fácil para que atacantes enumeren nombres de usuario válidos.
macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra is now available and addresses buffer overflow, code execution, and denial of service vulnerabilities.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-08-19 CVE Reserved
- 2019-10-03 CVE Published
- 2024-08-05 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-345: Insufficient Verification of Data Authenticity
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2019/Dec/26 | Mailing List |
|
| https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES | Product | |
| https://seclists.org/bugtraq/2019/Dec/23 | Mailing List |
|
| https://support.apple.com/kb/HT210785 | X_refsource_confirm |
|
| https://support.apple.com/kb/HT210788 | X_refsource_confirm |
|
| https://support.apple.com/kb/HT210789 | X_refsource_confirm |
|
| https://support.apple.com/kb/HT210790 | X_refsource_confirm |
|
| https://www.oracle.com/security-alerts/cpuapr2020.html | X_refsource_misc |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://github.com/the-tcpdump-group/libpcap/commit/484d60cbf7ca4ec758c3cbb8a82d68b244a78d58 | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Tcpdump Search vendor "Tcpdump" | Libpcap Search vendor "Tcpdump" for product "Libpcap" | < 1.9.1 Search vendor "Tcpdump" for product "Libpcap" and version " < 1.9.1" | - |
Affected
| in | Opengroup Search vendor "Opengroup" | Unix Search vendor "Opengroup" for product "Unix" | - | - |
Safe
|