CVE-2019-15162

Reference Links

• https://support.apple.com/en-us/HT210785 (Advisory)
• https://support.apple.com/en-us/HT210789 (Advisory)
• https://support.apple.com/en-us/HT210790 (Advisory)
• http://seclists.org/fulldisclosure/2019/Dec/26
• https://github.com/the-tcpdump-group/libpcap/blob/libpcap-1.9/CHANGES
• https://github.com/the-tcpdump-group/libpcap/commit/484d60cbf7ca4ec758c3cbb8a82d68b244a78d58
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5P5K3DQ4TFSZBDB3XN4CZNJNQ3UIF3D3/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GBIEKWLNIR62KZ5GA7EDXZS52HU6OE5F/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UZTIPUWABYUE5KQOLCKAW65AUUSB7QO6/
• https://seclists.org/bugtraq/2019/Dec/23
• https://support.apple.com/kb/HT210785
• https://support.apple.com/kb/HT210788
• https://support.apple.com/kb/HT210789
• https://support.apple.com/kb/HT210790
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.tcpdump.org/public-cve-list.txt

Parent vulnerabilities

(Appears in the following advisories)

• HT210785
• HT210789
• HT210790

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2019-8856
• CVE-2019-8834
• CVE-2019-8848
• CVE-2019-8830
• CVE-2019-8841
• CVE-2019-8833
• CVE-2019-8828
• CVE-2019-8838
• CVE-2019-15903
• CVE-2019-15161
• CVE-2019-15162
• CVE-2019-15163
• CVE-2019-15164
• CVE-2019-15165
• CVE-2019-8857
• CVE-2019-8832
• CVE-2019-8898
• CVE-2019-8835
• CVE-2019-8844
• CVE-2019-8846

Frequently Asked Questions

• What is the vulnerability ID of this issue?

  The vulnerability ID of this issue is CVE-2019-15162.

• What is the severity level of CVE-2019-15162?

  The severity level of CVE-2019-15162 is medium, with a severity value of 5.3.

• What is the affected software?

  The affected software includes Tcpdump Libpcap version up to 1.9.1, Apple watchOS version up to 6.1.1, Apple tvOS version up to 13.3, Apple iOS version up to 13.3, and Apple iPadOS version up to 13.3.

• What is the description of CVE-2019-15162?

  CVE-2019-15162 is a vulnerability in libpcap before version 1.9.1 on non-Windows platforms, which may provide details about why authentication failed, making it easier for attackers to enumerate valid usernames.

• How can I mitigate the vulnerability?

  To mitigate the vulnerability, update the affected software to the recommended versions: libpcap version 1.9.1 for Tcpdump Libpcap, watchOS version 6.1.1 or later, tvOS version 13.3 or later, iOS version 13.3 or later, and iPadOS version 13.3 or later.