scapy 2.4.0 is affected by: Denial of Service. The impact is: infinite loop, resource consumption and program unresponsive. The component is: _RADIUSAttrPacketListField.getfield(self..). The attack vector is: over the network or in a pcap. both work.
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Scapy | Scapy | 2.4.0 (including) | 2.4.0 (including) |
| Scapy | Ubuntu | trusty | * |
| Scapy | Ubuntu | upstream | * |