Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
AlmaLinux libpcap can run out of memory
published 6 years ago
Summary
The libpcap library used on AlmaLinux for network monitoring may consume all system memory when processing certain packet headers. This could cause the affected system to slow down or stop working. Update libpcap to version 1.9.1 to prevent the problem.
What to do
- Update almalinux libpcap-devel to version 14:1.9.1-4.el8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| AlmaLinux:8 | almalinux | libpcap-devel |
< 14:1.9.1-4.el8 Fix: upgrade to 14:1.9.1-4.el8
|
Original advisory text
Low: libpcap security, bug fix, and enhancement update
The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging.
The following packages have been upgraded to a later upstream version: libpcap (1.9.1). (BZ#1806422)
Security Fix(es):
* libpcap: Resource exhaustion during PHB header length validation (CVE-2019-15165)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
The following packages have been upgraded to a later upstream version: libpcap (1.9.1). (BZ#1806422)
Security Fix(es):
* libpcap: Resource exhaustion during PHB header length validation (CVE-2019-15165)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
References
- https://vulners.com/cve/CVE-2019-15165 Third Party Advisory
Timeline
Published3 Nov 2020
Updated29 Oct 2026
First seen29 Oct 2026
Sources
ALSA-2020:4547 · OSV
Track software like this
Free during beta