Libpcap

This hub aggregates every CVE we track for Libpcap, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Libpcap.

• CVE-2025-11964OOBW in utf_16le_to_utf_8_truncated() in libpcap1.9Dec 31, 2025
• CVE-2025-11961OOBR and OOBW in pcap_ether_aton() in libpcap1.9Dec 31, 2025
• CVE-2024-8006NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support4.4Aug 30, 2024
• CVE-2023-7256Double-free in libpcap before 1.10.5 with remote packet capture support.4.4Aug 30, 2024
• CVE-2019-15165sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory.5.3Oct 3, 2019
• CVE-2019-15164rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source.5.3Oct 3, 2019
• CVE-2019-15163rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a denial of service (NULL pointer dereference and daemon crash) if a crypt() call fails.7.5Oct 3, 2019
• CVE-2019-15162rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provides details about why authentication failed, which might make it easier for attackers to enumerate valid usernames.5.3Oct 3, 2019
• CVE-2019-15161rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length values because of reuse of a variable. This may open up an attack vector involving extra data at the end of a request.5.3Oct 3, 2019
• CVE-2011-1935pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might allow remote attackers to send arbitrary data while avoidi...9.8Oct 20, 2017