Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99747.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-99747
Upstream
Published
2026-09-05T19:16:56Z
Modified
2026-10-23T14:17:39Z
Summary
CVE-2026-6554 affecting package libpcap for versions less than 1.10.7-1
Details

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. A crafted filter program or the 'protochain' primitive used on a crafted network packet can cause the interpreter to loop infinitely.

References

Affected packages

Azure Linux:3 / libpcap

Package

Name
libpcap
Purl
pkg:rpm/azure-linux/libpcap

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.7-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-99747.json"