Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99744.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-99744
Upstream
  • CVE-2026-0799
Published
2026-09-05T19:16:55Z
Modified
2026-09-06T14:18:06.629482973Z
Summary
CVE-2026-0799 affecting package libpcap 1.10.6-1
Details

In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not exceed 15, but libpcap BPF interpreter does not validate the value. In particular uncommon use cases a crafted filter program can cause the interpreter to try reading and writing the OS process memory in the 16GiB starting at the current stack frame on 64-bit architectures and in the entire address space on 32-bit architectures.

References

Affected packages

Azure Linux:3 / libpcap

Package

Name
libpcap
Purl
pkg:rpm/azure-linux/libpcap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Last affected
1.10.6-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99744.json"