CVE-2019-15165 Integer overflow in n/a
An attacker can cause a denial of service in libpcap by providing a malformed PCAPNG file with an invalid header length.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-15165?
CVE-2019-15165 is a medium-severity vulnerability in Apple Ipados, published on 3 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Weakness: CWE-770
Which versions are affected by CVE-2019-15165?
It affects 11 products.
Linux distribution packages (7)
libpcap-devel AlmaLinux:8 | All versions | 14:1.9.1-4.el8 |
libpcap Red Hat:enterprise_linux:8::baseos | All versions | 14:1.9.1-4.el8 |
libpcap-debuginfo Red Hat:enterprise_linux:8::baseos | All versions | 14:1.9.1-4.el8 |
libpcap-debugsource Red Hat:enterprise_linux:8::baseos | All versions | 14:1.9.1-4.el8 |
libpcap-debuginfo Red Hat:enterprise_linux:8::crb | All versions | 14:1.9.1-4.el8 |
libpcap-debugsource Red Hat:enterprise_linux:8::crb | All versions | 14:1.9.1-4.el8 |
libpcap-devel Red Hat:enterprise_linux:8::crb | All versions | 14:1.9.1-4.el8 |
Products include Apple Ipados, Apple Iphone Os, Apple Mac Os X, Apple Tvos, Apple Watchos, Canonical Ubuntu Linux and 5 more.
How do I fix CVE-2019-15165?
Upgrade to a fixed version.
Is CVE-2019-15165 being exploited?
There is no known exploitation of CVE-2019-15165 in the wild and no public exploit code.
Other vulnerabilities in Apple Ipados
- CVE-2025-43300 Apple iOS, iPadOS, and macOS Out-of-Bounds Write
- CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write
- CVE-2025-24085 Apple Multiple Products Use-After-Free
- CVE-2025-31200 Apple Multiple Products Memory Corruption
- CVE-2025-31201 Apple Multiple Products Arbitrary Read and Write
Sources
Also known as ALPINE-CVE-2019-15165, ALSA-2020:4547, DEBIAN-CVE-2019-15165, DLA-1967-1, DLA-2850-1, GHSA-4jh3-696v-qm6r and 3 more.