Search for packages
| purl | pkg:pypi/scapy@2.4.1 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 3.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dy69-93q2-jucu
Aliases: GHSA-cq46-m9x9-j8w2 |
Scapy Session Loading Vulnerable to Arbitrary Code Execution via Untrusted Pickle Deserialization An unsafe deserialization vulnerability in Scapy <v2.7.0 allows attackers to execute arbitrary code **when a malicious session file is locally loaded via the `-s` option**. This requires convincing a user to manually load a malicious session file. --- | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-2jhn-7xzz-qfdt | scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work. |
PYSEC-2019-50
|
| VCID-uyf3-v6w2-87ca | scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work. |
CVE-2019-1010142
GHSA-mpf2-q34c-fc6j PYSEC-2019-120 |