CVE-2026-18238
published 2026-09-05CVE-2026-18238: The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a…
PriorityP428medium5CVSS 3.1
AVNACLPRLUINSCCLINAN
EPSS
0.18%
7.0th percentile
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| openshift | ose-rhel-coreos-8 | — | — |
| openshift | ose-rhel-coreos-9 | — | — |
| the_tcpdump_group | libpcap | — | — |
| the_tcpdump_group | libpcap | — | — |
| the_tcpdump_group | libpcap | — | — |
| the_tcpdump_group | libpcap | >= 1.10.x < 1.10.7 | 1.10.7 |
CVSS provenance
nvdv3.15.0MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
vendor_redhat5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers.
ghsa_unreviewed·2026-09-05
CVE-2026-18238 [MEDIUM] CWE-126 The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers.
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
VulDB
Tcpdump Group libpcap up to 1.8.x/1.9.x/1.10.6 Packet Message out-of-bounds (EUVD-2026-72021)
vuldb·2026-09-05·CVSS 5.0
CVE-2026-18238 [MEDIUM] Tcpdump Group libpcap up to 1.8.x/1.9.x/1.10.6 Packet Message out-of-bounds (EUVD-2026-72021)
A vulnerability was found in Tcpdump Group libpcap up to 1.8.x/1.9.x/1.10.6. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Packet Message Handler. This manipulation causes out-of-bounds read.
This vulnerability is registered as CVE-2026-18238. Remote exploitation of the attack is possible. No exploit is available.
Upgrading the affected component is recommended.
Red Hat
libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
vendor_redhat·2026-09-05·CVSS 5.0
CVE-2026-18238 [MEDIUM] CWE-125 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
A flaw was found in libpcap. The rpcap client code, which processes RPCAP_MSG_PACKET messages from a server, incorrectly validates its headers. A malicious server could exploit this vulnerability by sending a specially crafted message, causing the client to read up to 20 bytes of memory beyond its intended buffer. This out-of-bounds read could lead to the disclosure of sensitive information from th
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client [fedora-all]
bugzilla·2026-09-09·CVSS 5.0
CVE-2026-18238 [MEDIUM] CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client [fedora-all]
CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
Bugzilla
CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
bugzilla·2026-09-05·CVSS 5.0
CVE-2026-18238 [MEDIUM] CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
CVE-2026-18238 libpcap: libpcap: Information disclosure via out-of-bounds read in rpcap client
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
2026-09-05
Published