Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-18238

Опубликовано: 05 сент. 2026
Источник: nvd
CVSS3: 5
EPSS Низкий

Описание

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.

EPSS

Процентиль: 7%
0.00176
Низкий

5 Medium

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 5
ubuntu
16 дней назад

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.

CVSS3: 5
redhat
16 дней назад

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.

msrc
14 дней назад

OOBR in rpcap client in libpcap before 1.10.7

CVSS3: 5
debian
16 дней назад

The rpcap client code that processes a RPCAP_MSG_PACKET message receiv ...

CVSS3: 5
github
16 дней назад

The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.

EPSS

Процентиль: 7%
0.00176
Низкий

5 Medium

CVSS3

Дефекты

CWE-126