CVE-2026-18313

    Dashboard / Vulnerabilities / CVE-2026-18313

    CVE-2026-18313

    Published: 5 Sept 2026Last Modified: 27 Sept 2026

    Summary: rpcapd memory leak in libpcap before 1.10.7

    Details: rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.

    References: https://github.com/the-tcpdump-group/libpcap/, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/18xxx/CVE-2026-18313.json, https://nvd.nist.gov/vuln/detail/CVE-2026-18313, https://github.com/the-tcpdump-group/libpcap/commit/f9775af1a0ec76db60c7213241e6b48f1be10ac7

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8c6c412779eb5bc57c9d07fe5a25f8046088bef5
    Fixed -None

    Affected versions

    1.9.x

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2026-18313 | CVE-DB