UBUNTU-CVE-2023-7256: libpcap Ubuntu
Vulnerability summary
UBUNTU-CVE-2023-7256 is a vulnerability in libpcap Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 0 · Downstream 0 · Related 1Timeline
- 31-08-2024PublishedVulnerability first disclosed.
- 04-02-2026Last modifiedVulnerability information updated.
Description
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- libpcapAll versions (No fix recorded)
1 vendor · 1 product