CVE-2026-18313

Summary

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.

Affected Software

VendorProductVersion RangeStatus
The Tcpdump Grouplibpcap1.9.xaffected
The Tcpdump Grouplibpcap1.10.x < 1.10.7affected

Weaknesses

  • CWE-401: CWE-401 Missing Release of Memory after Effective Lifetime

References