Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

secdev/scapy

              master @ fbd0956
            

Fixes

CVEs

HIGH

Peak severity

50.0%

Coverage

Highlights

Auth Bypass: 1 prior fix. Scrutinize any change in this area.

scapy/layers/kerberos.py: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Windows usernames were processed case-sensitively during NTLM authentication, deviating from Windows' native behavior and potentially allowing authentication bypasses or session mismatches. Developers implementing authentication protocols must normalize identifiers to match downstream system behaviors.

Cryptographic Issues: The Kerberos layer previously failed to verify cryptographic signatures on Service for User (S4U) responses (PA-FOR-X509-USER checksums), which could allow attackers to forge user identities. Cryptographic checksums on privilege-granting structures must always be validated.

Denial of Service: Infinite loops during packet field parsing, such as in _RADIUSAttrPacketListField.getfield, can cause complete CPU exhaustion and application unresponsiveness when parsing untrusted network captures or live traffic.