Libpcap
Vendor:
First CVE: Oct 20, 2017 · Active for 8 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
5.9
Avg CVSS
Higher Avg CVSS than 20% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Libpcap over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 20, 2017
8 years ago
Most Recent CVE
Aug 31, 2024
693 days ago
CVE Severity & Scoring
Libpcap8 CVEs
75%
13%
13%
All CVEs352,427 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local2 (25.0%)
Network6 (75.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High2 (25.0%)
None6 (75.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-1935CRITICAL pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary | Oct 20, 2017 | 9.8 | 31 | NO | NO |
CVE-2019-15163HIGH rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails. | Oct 3, 2019 | 7.5 | 26 | NO | NO |
CVE-2019-15165MEDIUM sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory. | Oct 3, 2019 | 5.3 | 21 | NO | NO |
CVE-2019-15164MEDIUM rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. | Oct 3, 2019 | 5.3 | 20 | NO | NO |
CVE-2019-15162MEDIUM rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usern | Oct 3, 2019 | 5.3 | 20 | NO | NO |
CVE-2019-15161MEDIUM rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a requ | Oct 3, 2019 | 5.3 | 20 | NO | NO |
CVE-2024-8006MEDIUM Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available | Aug 31, 2024 | 4.4 | 16 | NO | NO |
CVE-2023-7256MEDIUM In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clea | Aug 31, 2024 | 4.4 | 14 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Libpcap
Top CWEs
Versions
No cataloged versions.