Most recent entries from all

ALSA-2026:74441 — Important: libpcap security update

Affected: AlmaLinux:9: libpcap, AlmaLinux:9: libpcap-devel

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging.

Security Fix(es):

* libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access (CVE-2026-0799)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

fkie_cve-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

GCVE-1988-2026-0387 — [Bugtraq] [slackware-security] libpcap (SSA:2026-249-01)

Affected: unknown libpcap SSA:2026-249-01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] libpcap (SSA:2026-249-01) New libpcap packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/libpcap-1.10.7-i586-1_slack15.0.txz: Upgraded. This libpcap release fixes a number of vulnerabilities. For more information, see: https://www.cve.org/CVERecord?id=CVE-2026-0799 https://www.cve.org/CVERecord?id=CVE-2026-31912 https://www.cve.org/CVERecord?id=CVE-2026-31911 https://www.cve.org/CVERecord?id=CVE-2026-6244 https://www.cve.org/CVERecord?id=CVE-2026-6554 https://www.cve.org/CVERecord?id=CVE-2026-18313 https://www.cve.org/CVERecord?id=CVE-2026-18238 (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://slackware.com for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/libpcap-1.10.7-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/libpcap-1.10.7-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackwar…

GHSA-w3r6-8g24-54m5

msrc_CVE-2026-0799 — OOBR and OOBW in libpcap before 1.10.7

msrc_CVE-2026-0799

OESA-2026-3988 — libpcap security update

Affected: openEuler:24.03-LTS-SP3: libpcap

This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture. Security Fix(es):

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.(CVE-2026-18238)

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.(CVE-2026-18313)

libpcap BPF interpreter calls abort() if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process.(CVE-2026-31911…

openSUSE-SU-2026:11744-1 — libpcap-devel-1.10.7-1.1 on GA media

libpcap-devel-1.10.7-1.1 on GA media

RHSA-2026:82939 — Red Hat Security Advisory: Red Hat Update Infrastructure 5.3 security update

libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access glibc: glibc: Process abort due to invalid memory in wordexp glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion curl: curl: Cookie injection via malicious HTTP server using super cookies curl: curl: Information disclosure via incorrect Digest authentication header reuse gdb: gdb: Out-of-bounds write in STABS parser read_member_functions() via crafted ELF glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string python: Use-after-free of a server-side SSLContext when sni_callback switches contexts glibc: Fix out-of-bounds array write in tdelete python: python: Certificate verification bypass via missing server_hostname validation in SSLContext.wrap_bio() gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c gawk: gawk: Memory corruption via integer overflow gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay expat: Expat: Denial of Service via quadratic complexity in attribute processing vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion libxml2: double-free/UAF in libxml2 Python bindings glibc: Non-progress DoS in SHIFT_JISX0213 -&gt glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state openssl: compat-openssl: openssl: Information disclosure via DT…

SUSE-SU-2026:23737-1 — Security update for libpcap

Security update for libpcap

UBUNTU-CVE-2026-0799

Affected: Ubuntu:Pro:14.04:LTS: libpcap, Ubuntu:Pro:16.04:LTS: libpcap, Ubuntu:Pro:18.04:LTS: libpcap, Ubuntu:Pro:20.04:LTS: libpcap, Ubuntu:22.04:LTS: libpcap, Ubuntu:24.04:LTS: libpcap, Ubuntu:26.04:LTS: libpcap