CVE-2019-11490

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-11490
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11490.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-11490
Published
2019-04-24T03:29:00.267Z
Modified
2026-07-08T19:50:17.884795Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in Npcap 0.992. Sending a malformed .pcap file with the loopback adapter using either pcapsendqueuequeue() or pcapsendqueuetransmit() results in kernel pool corruption. This could lead to arbitrary code executing inside the Windows kernel and allow escalation of privileges.

References

Affected packages

Git / github.com/nmap/npcap

Affected ranges

Type
GIT
Repo
https://github.com/nmap/npcap
Events
Introduced
b67d7eec5ae9e15598ad760055fc89dae68b92e4
Last affected
b67d7eec5ae9e15598ad760055fc89dae68b92e4
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:nmap:npcap:0.992:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "0.992"
        },
        {
            "last_affected": "0.992"
        }
    ]
}

Affected versions

0.*
0.992
v0.*
v0.992

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11490.json"