Memory Leak Vulnerability in rpcapd from the Tcpdump Group
CVE-2026-18313

4.3MEDIUM

Key Information:

Vendor

The Tcpdump Group

Status
Libpcap
Vendor
CVE Published:
5 September 2026

Badges

👾 Exploit Exists

What is CVE-2026-18313?

The rpcapd component from the Tcpdump Group is susceptible to a memory leak vulnerability, where it allocates up to 65,536 bytes for each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message from clients without freeing that memory. This can lead to significant memory consumption, especially when exploited by malicious clients sending frequent requests. The issue arises from the server's inability to recover memory even under standard operational scenarios.

Affected Version(s)

libpcap 1.9.x

libpcap 1.10.x < 1.10.7

References

https://github.com/the-tcpdump-group/libpcap/commit/f9775...
patch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.