CVE-2026-18238
Published: September 8, 2026Last modified: September 18, 2026
Description
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 5 |
| Attack Vector | NETWORK |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | CHANGED |
| Confidentiality | LOW |
| Integrity impact | NONE |
| Availability impact | NONE |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N |
Notes
rpcap feature is disabled
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | libpcap | Not affected (1.10.1-r0) |
| 25 LTS | libpcap | Not affected (1.10.5-r0) | |
| Stream | libpcap | Not affected (1.10.1-r0) |