Most recent entries from all

Withdrawn: BELL-CVE-2026-18313 — CVE-2026-18313 does not affect BellSoft software

Withdrawn by the publisher.

fkie_cve-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.

GCVE-1988-2026-0387 — [Bugtraq] [slackware-security] libpcap (SSA:2026-249-01)

Affected: unknown libpcap SSA:2026-249-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] libpcap (SSA:2026-249-01) New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/libpcap-1.10.7-i586-1_slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see: https://www.cve.org/CVERecord?id=CVE-2026-0799 https://www.cve.org/CVERecord?id=CVE-2026-31912 https://www.cve.org/CVERecord?id=CVE-2026-31911 https://www.cve.org/CVERecord?id=CVE-2026-6244 https://www.cve.org/CVERecord?id=CVE-2026-6554 https://www.cve.org/CVERecord?id=CVE-2026-18313 https://www.cve.org/CVERecord?id=CVE-2026-18238 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libpcap-1.10.7-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libpcap-1.10.7-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackwar…

GHSA-f2rh-ff9r-fh4j

msrc_CVE-2026-18313 — rpcapd memory leak in libpcap before 1.10.7

msrc_CVE-2026-18313

OESA-2026-3988 — libpcap security update

Affected: openEuler:24.03-LTS-SP3: libpcap

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fix(es):

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.(CVE-2026-0799)

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.(CVE-2026-18238)

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.(CVE-2026-31911…

openSUSE-SU-2026:11744-1 — libpcap-devel-1.10.7-1.1 on GA media

libpcap-devel-1.10.7-1.1 on GA media

SUSE-SU-2026:23737-1 — Security update for libpcap

Security update for libpcap

UBUNTU-CVE-2026-18313

Affected: Ubuntu:Pro:14.04:LTS: libpcap, Ubuntu:Pro:16.04:LTS: libpcap, Ubuntu:Pro:18.04:LTS: libpcap, Ubuntu:Pro:20.04:LTS: libpcap, Ubuntu:22.04:LTS: libpcap, Ubuntu:24.04:LTS: libpcap, Ubuntu:26.04:LTS: libpcap