Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99729.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-99729
Upstream
Published
2026-09-05T19:16:55Z
Modified
2026-09-06T14:18:06.620760082Z
Summary
CVE-2026-18238 affecting package libpcap 1.10.6-1
Details

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.

References

Affected packages

Azure Linux:3 / libpcap

Package

Name
libpcap
Purl
pkg:rpm/azure-linux/libpcap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
1.10.6-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99729.json"