https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 14:21:52 +0000 https://vulnerability.circl.lu/vuln/bell-cve-2026-18313 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://vulnerability.circl.lu/vuln/bell-cve-2026-18313 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18313 <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-18313 https://vulnerability.circl.lu/vuln/ghsa-f2rh-ff9r-fh4j <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> https://vulnerability.circl.lu/vuln/ghsa-f2rh-ff9r-fh4j https://vulnerability.circl.lu/vuln/msrc_cve-2026-18313 msrc_CVE-2026-18313 https://vulnerability.circl.lu/vuln/msrc_cve-2026-18313 https://vulnerability.circl.lu/vuln/oesa-2026-3988 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: libpcap</p> <p>This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fix(es):</p> <p>In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.(CVE-2026-0799)</p> <p>The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.(CVE-2026-18238)</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.(CVE-2026-18313)</p> <p>libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.(CVE-2026-31911…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP3: libpcap</p> <p>This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fix(es):</p> <p>In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.(CVE-2026-0799)</p> <p>The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.(CVE-2026-18238)</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.(CVE-2026-18313)</p> <p>libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.(CVE-2026-31911…</p> https://vulnerability.circl.lu/vuln/oesa-2026-3988 https://vulnerability.circl.lu/vuln/opensuse-su-2026:11744-1 <p>libpcap-devel-1.10.7-1.1 on GA media</p> <p>libpcap-devel-1.10.7-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:11744-1 https://vulnerability.circl.lu/vuln/suse-su-2026:23737-1 <p>Security update for libpcap</p> <p>Security update for libpcap</p> https://vulnerability.circl.lu/vuln/suse-su-2026:23737-1 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-18313 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libpcap, Ubuntu:Pro:16.04:LTS: libpcap, Ubuntu:Pro:18.04:LTS: libpcap, Ubuntu:Pro:20.04:LTS: libpcap, Ubuntu:22.04:LTS: libpcap, Ubuntu:24.04:LTS: libpcap, Ubuntu:26.04:LTS: libpcap</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libpcap, Ubuntu:Pro:16.04:LTS: libpcap, Ubuntu:Pro:18.04:LTS: libpcap, Ubuntu:Pro:20.04:LTS: libpcap, Ubuntu:22.04:LTS: libpcap, Ubuntu:24.04:LTS: libpcap, Ubuntu:26.04:LTS: libpcap</p> <p>rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-18313