TI-2024-07420 CVE-2024-8006 · GHSA-gj9v-677h-mwcx
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support
Priority LOW 20
Remote packet capture support is disabled by default in libpcap.
Vulnerabilities
8 records
TI-2023-06638 CVE-2023-7256 · GHSA-7m22-9mw3-j4pp
Double-free in libpcap before 1.10.5 with remote packet capture support.
Priority LOW 20
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whet…
TI-2019-11325 CVE-2019-15165 · GHSA-4jh3-696v-qm6r
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
Priority LOW 35
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.
TI-2019-11324 CVE-2019-15164 · GHSA-p4mj-gpq6-mv6x
rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.
Priority LOW 29
rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.
TI-2019-11323 CVE-2019-15163 · GHSA-8f74-v8w6-4296
rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service…
Priority MEDIUM 40
rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.
TI-2019-11322 CVE-2019-15162 · GHSA-cwvm-qvg8-342x
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about…
Priority LOW 28
rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.
TI-2019-11321 CVE-2019-15161 · GHSA-mpx8-phwc-v8wq
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse…
Priority LOW 29
rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable.
TI-2011-01707 CVE-2011-1935 · GHSA-9x67-6959-6grf
pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when…
Priority MEDIUM 48
pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoiding detection via crafte…