Skip to main content

libpcap EUVDEUVD-2026-72016

| CVE-2026-31912 MEDIUM
Improper Validation of Specified Index, Position, or Offset in Input (CWE-1285)
2026-09-05 Tcpdump GHSA-5r9v-8527-q4jv
Information Disclosure Red Hat Suse Libpcap The Tcpdump Group
5.5
CVSS 3.1 · Vendor: Tcpdump
Share

Severity by source

Vendor (Tcpdump) PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vuln.today AI
5.3 MEDIUM

AC:H reflects the 'uncommon use cases' qualifier; C:L added because the description confirms out-of-bounds process memory reads, even if unreliable.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H
4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
6.1 MEDIUM
qualitative

Primary rating from Vendor (Tcpdump).

CVSS VectorVendor: Tcpdump

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

3
Source Code Evidence Fetched
Sep 05, 2026 - 19:17 vuln.today
Analysis Generated
Sep 05, 2026 - 19:17 vuln.today
CVE Published
Sep 05, 2026 - 18:49 cve.org
MEDIUM 5.5

DescriptionCVE.org

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading the OS process memory in the 32GiB around the buffer on 64-bit architectures and in the entire address space on 32-bit architectures.

AnalysisAI

Out-of-bounds memory reads in libpcap's userland BPF interpreter allow a local attacker who can supply a crafted filter program to drive the interpreter's program counter past the end of the filter buffer, reading up to 32 GiB of surrounding process memory on 64-bit systems or the entire address space on 32-bit systems. All libpcap versions tracked under CPE cpe:2.3:a:the_tcpdump_group:libpcap are affected; The Tcpdump Group has published a fix via commit d3f358d3. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Delivery
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Persist
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires local access (AV:L) with low-privilege credentials (PR:L per CVSS) on the target system. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The provided CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, score 5.5) reflects a medium-severity local vulnerability whose primary confirmed impact is process availability loss via crash. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Apply the upstream patch from The Tcpdump Group commit d3f358d3cffbe1ecb94d5284b3e81f052a0adcb9 (https://github.com/the-tcpdump-group/libpcap/commit/d3f358d3cffbe1ecb94d5284b3e81f052a0adcb9); because a tagged release has not been independently confirmed, track the libpcap GitHub repository and downstream distribution advisories for a versioned package containing this fix. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Libpcap

View all
CVE-2026-0799 HIGH
8.7 Sep 05

Unvalidated BPF scratch-register array index in libpcap's user-space BPF interpreter allows a local attacker with low pr
CVE-2019-15163 HIGH
7.5 Oct 03

rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daem
CVE-2026-6554 MEDIUM
5.5 Sep 05

Infinite-loop denial of service in libpcap's BPF interpreter allows a local low-privileged attacker to hang any process

CVE-2026-6244 MEDIUM
5.5 Sep 05

Division by zero in libpcap's BPF interpreter can crash any application using the library when processing a crafted filt
CVE-2026-31911 MEDIUM
5.5 Sep 05

Process termination via crafted BPF filter in libpcap allows a local attacker with low privileges to crash any applicati
CVE-2019-15165 MEDIUM
5.3 Oct 03

sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. Rated med
CVE-2019-15164 MEDIUM
5.3 Oct 03

rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. Rated medium seve
CVE-2019-15162 MEDIUM
5.3 Oct 03

rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which
CVE-2019-15161 MEDIUM
5.3 Oct 03

rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. Rated medium se
CVE-2026-18238 MEDIUM
5.0 Sep 05

Remote memory disclosure in libpcap's rpcap client allows a malicious or compromised rpcap server to cause a connected c
CVE-2024-8006 MEDIUM
4.4 Aug 31

Remote packet capture support is disabled by default in libpcap. Rated medium severity (CVSS 4.4), this vulnerability is
CVE-2026-18313 MEDIUM
4.3 Sep 05

Memory exhaustion in libpcap's rpcapd remote capture daemon allows an authenticated remote client to degrade or crash th

Same weakness CWE-1285 – Improper Validation of Specified Index, Position, or Offset in Input

View all
CVE-2022-22223 HIGH POC
7.5
CVE-2018-25232 MEDIUM POC
6.8
CVE-2019-25593 MEDIUM POC
6.8
CVE-2019-25625 MEDIUM POC
6.2
CVE-2019-25622 MEDIUM POC
6.2
CVE-2026-33557 CRITICAL
9.1
CVE-2026-12681 HIGH
8.9
CVE-2026-18485 HIGH
8.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 Affected
SUSE Linux Enterprise Module for Package Hub 15 SP7 Affected

Share

EUVD-2026-72016 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy