CVE-2026-18313 PUBLISHED

rpcapd memory leak in libpcap before 1.10.7

Assigner: Tcpdump
Reserved: 29.07.2026 Published: 05.09.2026 Updated: 05.09.2026

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 4.3

Product Status

Vendor The Tcpdump Group
Product libpcap
Versions Default: unaffected
  • Version 1.9.x is affected
  • affected from 1.10.x to 1.10.7 (excl.)

Affected Configurations

The problem is specific to the remote packet capture code, which is not enabled in the default build configuration.

Exploits

A functional exploit exists.

Solutions

Upgrade to libpcap 1.10.7.

References

Problem Types

  • CWE-401 Missing Release of Memory after Effective Lifetime CWE