UBUNTU-CVE-2025-71463: Medium severity ubuntu/scapy vulnerability
Scapy before 2.7.0 contains an insecure deserialization vulnerability in the loadsession function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded Python code through reduce().
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker must provide a malicious Scapy session file in .pkl.gz format and convince a user to load it using the -s option or by setting conf.session. Exploitation also requires the user to interact with the crafted file.
Who is exposed to this vulnerability?
Users of Scapy versions before 2.7.0 are exposed when they load session files from untrusted sources. The vulnerability is local in scope because code execution occurs in the context of the user running Scapy.
How can I determine whether a system may be affected?
Check whether the installed Scapy version is earlier than 2.7.0 and whether users or automation load .pkl.gz session files through -s or conf.session. Treat previously obtained session files from untrusted or unknown sources as potentially malicious.
What can be done until Scapy is updated?
Do not load Scapy .pkl.gz session files from untrusted sources, including through the -s option or conf.session. Restrict session-file loading to files created and controlled by trusted users or processes.