CVE-2026-18238: falha de média gravidade em The Tcpdump Group libpcap
OOBR in rpcap client in libpcap before 1.10.7
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5epss 0.2%
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Produtos afetados
The Tcpdump Group · libpcapCVEs relacionadas — The Tcpdump Group libpcap
No mesmo produto, das mais perigosas para as menos.
CVE-2026-6554HIGHinfinte loop in libpcap before 1.10.7EPSS 0.4%CVE-2024-8006MEDIUMNULL pointer dereference in libpcap before 1.10.5 with remote packet capture supportEPSS 0.2%CVE-2023-7256MEDIUMDouble-free in libpcap before 1.10.5 with remote packet capture support.EPSS 0.2%CVE-2026-18313MEDIUMrpcapd memory leak in libpcap before 1.10.7EPSS 0.2%CVE-2026-6244MEDIUMdivision by zero in libpcap before 1.10.7EPSS 0.1%CVE-2025-11964LOWOOBW in utf_16le_to_utf_8_truncated() in libpcapEPSS 0.1%