CVE-2024-8006 — NULL Pointer Dereference in Libpcap

CWE-476 — NULL Pointer Dereference10 documents8 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 97.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Tcpdump LibpcapTHE Tcpdump Group Libpcap
Timeline
PublishedAug 31
Latest updateOct 15

Description

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which cau…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:HExploitability: 0.8 | Impact: 3.6

Affected Packages3 packages

▶NVDtcpdump/libpcap< 1.10.5
▶Debiantcpdump/libpcap< 1.10.5-1+1
▶CVEListV5the_tcpdump_group/libpcap1.10.x — 1.10.4+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-gj9v-677h-mwcx: Remote packet capture support is disabled by default in libpcap↗2024-08-31
▶
OSV
CVE-2024-8006: Remote packet capture support is disabled by default in libpcap↗2024-08-31
▶
CVEList
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support↗2024-08-30
▶

📋Vendor Advisories

6
Oracle
Oracle Oracle Communications Applications Risk Matrix: Core (libpcap) — CVE-2024-8006↗2025-10-15
▶
Oracle
Oracle Oracle Communications Risk Matrix: Platform (libcap) — CVE-2024-8006↗2025-07-15
▶
Oracle
Oracle Oracle Communications Risk Matrix: ATS Framework (libpcap) — CVE-2024-8006↗2025-01-15
▶
Red Hat
libpcap: NULL pointer derefence in pcap_findalldevs_ex() in pcap-new.c↗2024-08-31
▶
Microsoft
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support↗2024-08-13
▶
CVE-2024-8006 — NULL Pointer Dereference in Libpcap | cvebase