Skip to content

CVE-2026-0799 (High) detected in libpcaplibpcap-1.10.5 #514

Description

@mend-bolt-for-github

CVE-2026-0799 - High Severity Vulnerability

Vulnerable Library - libpcaplibpcap-1.10.5

the LIBpcap interface to various kernel packet capture mechanism

Library home page: https://github.com/salewski/libpcap.git

Found in base branches: stable/4.0, master

Vulnerable Source Files (1)

/contrib/libpcap/bpf_filter.c

Vulnerability Details

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

Publish Date: 2026-09-05

URL: CVE-2026-0799

CVSS 3 Score Details (8.7)

Base Score Metrics:

  • Exploitability Metrics:
    • Attack Vector: Local
    • Attack Complexity: Low
    • Privileges Required: Low
    • User Interaction: None
    • Scope: Changed
  • Impact Metrics:
    • Confidentiality Impact: Low
    • Integrity Impact: High
    • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Release Date: 2026-09-05

Fix Resolution: https://github.com/the-tcpdump-group/libpcap.git - libpcap-1.10.7


Step up your Open Source Security Game with Mend here

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions