CVE-2026-0799

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter in libpcap does not properly validate register indexes in BPF instructions. A local attacker could craft a malicious filter program to trigger an out-of-bounds read and write vulnerability. This could allow the attacker to re...

CVE-2026-6244

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter's 'div k' and 'mod k' instructions do not validate if the immediate value 'k' is zero. A local attacker with low privileges could exploit this by providing a specially crafted filter program, leading to a division-by-zero...

CVE-2026-6554

A flaw was found in libpcap. The Berkeley Packet Filter BPF interpreter incorrectly handles offsets in 'ja L' instructions, allowing backward jumps without limiting loop iterations. A local attacker could provide a specially crafted filter program, leading to an infinite loop and causing a Denial...

CVE-2026-31912

A flaw was found in libpcap. The BPF interpreter in libpcap does not correctly handle crafted filter programs, leading to an out-of-bounds read. A local attacker could provide a specially crafted filter program, causing the interpreter to attempt to read memory outside of its allocated buffer. Th...

CVE-2026-6554

libpcap BPF interpreter treats the offset in the ja L BPF instructio...

UBUNTU-CVE-2026-6244

libpcap BPF interpreter for the div k and mod k ALU instructions...

UBUNTU-CVE-2026-6554

libpcap BPF interpreter treats the offset in the ja L BPF instructio...

UBUNTU-CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instructi...

CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter...

CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instructi...

CVE-2026-6244

libpcap BPF interpreter for the div k and mod k ALU instructions...

ALPINE-CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

AZL-99747 CVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

AZL-99924 CVE-2026-6554 affecting package nmap 7.95-5

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

CVE-2026-6554

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...

ALPINE-CVE-2026-0799

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...

ALPINE-CVE-2026-31911

libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...

AZL-99936 CVE-2026-6244 affecting package nmap 7.95-5

libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...

AZL-99738 CVE-2026-6244 affecting package libpcap for versions less than 1.10.7-1

libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...

ALPINE-CVE-2026-31912

libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...