In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.
CVSS Details
- CVSS 3.1 Base Score: 8.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libpcap-develUpgrade libpcap | Oct 11, 2026 | Oct 1, 2026 |
| Alpine Linux | — | Upgrade libpcap | Sep 7, 2026 | Sep 5, 2026 |
| Amazon_linux_2023 | — | Upgrade libpcap-develUpgrade libpcapUpgrade libpcap-debugsourceUpgrade libpcap-debuginfo | Sep 30, 2026 | Sep 5, 2026 |
| Redhat_linux | — | Upgrade libpcap-debugsourceUpgrade libpcap-develUpgrade libpcapNo solution existsUpgrade libpcap-debuginfo | Sep 10, 2026 | Sep 5, 2026 |
| Rocky_linux | — | Upgrade libpcap-debugsourceUpgrade libpcap-debuginfoUpgrade libpcapUpgrade libpcap-devel | Oct 5, 2026 | Oct 2, 2026 |
| Ubuntu | — | Upgrade libpcap0.8t64Upgrade libpcap0.8 (Ubuntu Pro)Upgrade libpcap0.8 | Sep 27, 2026 | Sep 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub