3068 matches found
CVE-2026-0799 OOBR and OOBW in libpcap before 1.10.7
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...
CVE-2026-0799
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...
CVE-2026-0799 OOBR and OOBW in libpcap before 1.10.7
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...
CVE-2026-0799
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...
monty v0.0.22
Monty A minimal, secure Python interpreter written in Rust for use by AI. Experimental - This project is still in development, and not ready for prime time. A minimal, secure Python interpreter written in Rust for use by AI. Monty avoids the cost, latency, complexity and general faff of using a...
PT-2026-86443
Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter calls the abort function when it encounters a BPF instruction containing an invalid opcode. This behavior allows a crafted filter program to terminate the operating system...
PT-2026-86445
Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to verify if the immediate value is zero when processing 'div k' and 'mod k' ALU instructions. This allows a specially crafted filter program to trigger a division b...
CVE-2026-31912: Improper Validation of Specified Index, Position, or Offset in Input
libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with an offset that translates to a pointer outside of the buffer. In particular uncommon use cases a crafted filter program can cause the...
CVE-2026-31911: Reachable Assertion
libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can terminate the OS process...
CVE-2026-6554: Loop with Unreachable Exit Condition
libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely...
CVE-2026-6244: Divide By Zero
libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a crafted filter program can cause a division by zero...
CVE-2026-0799: Improper Validation of Array Index
In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to tr...
PT-2026-86446
Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to enable looping through backward jumps. However, the interpreter does not restrict the number of loop...
PT-2026-86444
Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description The BPF interpreter fails to detect when the end of the filter program buffer is reached due to a missing return instruction, or when a jump instruction uses an offset that points outside the...
Linux Distros Unpatched Vulnerability : CVE-2026-31911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter calls abort if it encounters a BPF instruction that has an invalid opcode. In particular uncommon use cases a crafted filter program can...
Linux Distros Unpatched Vulnerability : CVE-2026-6554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the...
Linux Distros Unpatched Vulnerability : CVE-2026-0799
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpc...
Linux Distros Unpatched Vulnerability : CVE-2026-31912
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter detects neither reaching the end of the filter program buffer due to lack of a return instruction nor executing a jump instruction with ...
Linux Distros Unpatched Vulnerability : CVE-2026-6244
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libpcap BPF interpreter for the 'div k' and 'mod k' ALU instructions does not check whether the immediate value is zero. In particular uncommon use cases a...
Linux Kernel BPF Buffer Overflow DoS
The vulnerability of the bpffdarraymapclear function in the kernel/bpf/arraymap.c module, which supports BPF interpreter in Linux kernels, is related to synchronization errors. Exploiting this vulnerability could allow an attacker to trigger a service failure...