| Vulnerability Name: | CVE-2019-15162 (CCN-168324) | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2019-10-02 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Published: | 2019-10-02 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Updated: | 2019-10-27 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Summary: | rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames. | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) 4.6 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
4.6 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-345 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2019-15162 Source: FULLDISC Type: UNKNOWN 20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra Source: XF Type: UNKNOWN libpcap-cve201915162-info-disc(168324) Source: CCN Type: libpcap GIT Repository libpcap Source: CONFIRM Type: Product, Release Notes https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES Source: CONFIRM Type: Patch, Third Party Advisory https://github.com/the-tcpdump-group/libpcap/commit/484d60cbf7ca4ec758c3cbb8a82d68b244a78d58 Source: FEDORA Type: UNKNOWN FEDORA-2019-eaa681d33e Source: FEDORA Type: UNKNOWN FEDORA-2019-b92ce3144a Source: FEDORA Type: UNKNOWN FEDORA-2019-4fe461079f Source: BUGTRAQ Type: UNKNOWN 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra Source: CCN Type: Apple security document HT210788 About the security content of macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra Source: CONFIRM Type: UNKNOWN https://support.apple.com/kb/HT210785 Source: CONFIRM Type: UNKNOWN https://support.apple.com/kb/HT210788 Source: CONFIRM Type: UNKNOWN https://support.apple.com/kb/HT210789 Source: CONFIRM Type: UNKNOWN https://support.apple.com/kb/HT210790 Source: N/A Type: UNKNOWN N/A Source: CONFIRM Type: Vendor Advisory https://www.tcpdump.org/public-cve-list.txt Source: CCN Type: WhiteSource Vulnerability Database CVE-2019-15162 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||