Lucene search
+L

65 matches found

osv_ubuntu
osv_ubuntu
•added 2026/09/05 7:16 p.m.•20 views

UBUNTU-CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS6AI score0.00179EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/05 6:51 p.m.•32 views

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS6AI score0.00179EPSS
SaveExploits0
Mend
Mend
•added 2026/09/05 6:51 p.m.•7 views

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5.3CVSS6AI score0.00179EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/05 6:51 p.m.•11 views

CVE-2026-18238 OOBR in rpcap client in libpcap before 1.10.7

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS6AI score0.00179EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/05 6:51 p.m.•16 views

EUVD-2026-72021

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS6AI score0.00179EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/05 6:51 p.m.•69 views

CVE-2026-18238

libpcap versions before 1.10.7 are affected by an out-of-bounds read in the rpcap client . The code that processes an RPCAP_MSG_PACKET message from the server incorrectly validates its headers, allowing a malicious server to cause the client to treat up to 20 bytes of client process memory beyond...

5CVSS6AI score0.00179EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/09/05 6:51 p.m.•11 views

CVE-2026-18238 OOBR in rpcap client in libpcap before 1.10.7

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS5.9AI score
SaveExploits0References4
Cvelist
Cvelist
•added 2026/09/05 6:51 p.m.•64 views

CVE-2026-18238 OOBR in rpcap client in libpcap before 1.10.7

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS0.00179EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/09/05 6:51 p.m.•9 views

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the rpcap client process when handling RPCAPMSGPACKET messages from a server. An attacker can access sensitive information from process memory by sending specially crafted messages from a malicious server...

8.2CVSS5.7AI score0.00179EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/05 6:51 p.m.•17 views

EUVD-2026-72020

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

4.3CVSS5.4AI score0.00227EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/09/05 6:51 p.m.•35 views

CVE-2026-18313

rpcapd can allocate up to 65536 bytes per each RPCAPMSGUPDATEFILTERREQ or RPCAPMSGSTARTCAPREQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster...

4.3CVSS5.5AI score0.00227EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/05 12:00 a.m.•20 views

PT-2026-86442

Name of the Vulnerable Software and Affected Versions rpcapd affected versions not specified Description The software fails to free memory allocated during the processing of specific client messages. Specifically, it can allocate up to 65536 bytes for each RPCAP MSG UPDATEFILTER REQ or RPCAP MSG...

8.7CVSS5.5AI score0.00227EPSS
SaveExploits0References57
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/05 12:00 a.m.•6 views

CVE-2026-18238: Improper Validation of Consistency within Input

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

5CVSS6AI score0.00179EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/05 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2026-18238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted...

5CVSS5.9AI score0.00179EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/09/05 12:00 a.m.•19 views

PT-2026-86441

Name of the Vulnerable Software and Affected Versions rpcap affected versions not specified Description The rpcap client code incorrectly validates headers when processing a RPCAP MSG PACKET message received from a server. A malicious server can send a crafted message, causing the client to treat...

8.7CVSS5.9AI score0.00179EPSS
SaveExploits0References60
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•8 views

EUVD-2019-18589

Malware in sbrugna...

7.5CVSS6.8AI score0.03735EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
•added 2023/02/15 4:14 a.m.•7 views

SUSE CVE-2019-9214

In Wireshark 2.4.0 to 2.4.12 and 2.6.0 to 2.6.6, the RPCAP dissector could crash. This was addressed in epan/dissectors/packet-rpcap.c by avoiding an attempted dereference of a NULL conversation...

5.3CVSS7.5AI score0.03735EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/10/29 12:00 a.m.•10 views

PT-2022-36723 · Git +1 · Wireshark

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. The crash state involves several functions, including expert set info vformat, expert add info...

6.8AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•48 views

SUSE: Security Advisory (SUSE-SU-2019:0688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.03863EPSS
SaveExploits2References7
Veracode
Veracode
•added 2020/09/21 6:39 a.m.•34 views

Denial Of Service (DoS)

wireshark is vulnerable to denial of service. A remote attacker is able to crash the RPCAP dissector in epan/dissectors/packet-rpcap.c via a NULL pointer dereference...

7.5CVSS3AI score0.03735EPSS
SaveExploits0References11Affected Software2
Rows per page
Query Builder