{"id":"CVE-2024-8006","aliases":["AZL-48409","AZL-48412","AZL-48438","AZL-48462","BELL-CVE-2024-8006","DEBIAN-CVE-2024-8006","EUVD-2024-48881","GHSA-gj9v-677h-mwcx","JLSEC-2026-765","MGASA-2024-0295","OESA-2024-2180","ROOT-OS-ALPINE-320-CVE-2024-8006","SUSE-SU-2024:3210-1","SUSE-SU-2024:3217-1","SUSE-SU-2024:3355-1","SUSE-SU-2024:3516-1","SUSE-SU-2025:20059-1","SUSE-SU-2026:20064-1","openSUSE-SU-2024:14309-1"],"status":"published","title":"NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","severity":{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00244,"percentile":0.15678,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2024-08-30T23:53:11Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:3","package":"libpcap","fixed_in":["1.10.5-1"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"nmap","fixed_in":["7.95-2"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"libpcap","fixed_in":["1.10.1-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"nmap","fixed_in":["7.93-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libpcap","fixed_in":["1.10.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libpcap","fixed_in":["1.10.5-1"],"sources":["osv"]},{"ecosystem":"Julia","package":"libpcap_jll","fixed_in":["1.10.5+0"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"libpcap","fixed_in":["1.10.4-r10071","1.10.4-r10072","1.10.4-r10074","1.10.4-r10073","1.10.4-r10075"],"sources":["osv"]},{"ecosystem":"Root:Alpine:3.20","package":"rootio-libpcap","fixed_in":["1.10.4-r10071","1.10.4-r10072","1.10.4-r10074","1.10.4-r10073","1.10.4-r10075"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"nmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.95-2"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"nmap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.93-3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.3-1","1.10.4-1","1.10.4-2","1.10.4-3","1.10.4-4","1.10.4-4.1","1.10.4-4.1~exp1","1.10.4-5","1.10.4-5+hurd.1","1.10.5-1","1.10.5-2","1.10.6-1","1.10.6-2","1.10.7-1","1.11.0-1"]},{"source":"osv","ecosystem":"Debian:13","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1"}]}]},{"source":"osv","ecosystem":"Julia","package":"libpcap_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.10.5+0"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-4.oe2203sp1"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-2.oe2403"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-2.oe2203sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-2.oe2203sp3"}]}],"bundled":2},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-7.oe2003sp4"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r10071"},{"fixed":"1.10.4-r10072"},{"fixed":"1.10.4-r10074"},{"fixed":"1.10.4-r10073"},{"fixed":"1.10.4-r10075"}]}]},{"source":"osv","ecosystem":"Root:Alpine:3.20","package":"rootio-libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-r10071"},{"fixed":"1.10.4-r10072"},{"fixed":"1.10.4-r10074"},{"fixed":"1.10.4-r10073"},{"fixed":"1.10.4-r10075"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.1-150400.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-150600.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP6","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-150600.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-150600.3.3.2"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.1-10.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-150300.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.1-150300.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-slfo.1.1_2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libpcap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.5-1.1"}]}],"bundled":2}],"products":[{"vendor":"tcpdump","product":"libpcap"},{"vendor":"the tcpdump group","product":"libpcap"}],"references":[{"url":"https://github.com/the-tcpdump-group/libpcap/commit/0f8a103469ce87d2b8d68c5130a46ddb7fb5eb29","tags":["patch","Patch","fix","web"]},{"url":"https://github.com/the-tcpdump-group/libpcap/commit/8a633ee5b9ecd9d38a587ac9b204e2380713b0d6","tags":["patch","Patch","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8006","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-gj9v-677h-mwcx","tags":["web"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2024-8006","tags":["advisory"]},{"url":"https://github.com/the-tcpdump-group/libpcap/","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8006.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-8006","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0295.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33537","tags":["report"]},{"url":"https://lwn.net/Articles/988357/","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2180","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-7256","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243210-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230020","tags":["report"]},{"url":"https://bugzilla.suse.com/1230034","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-7256","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-8006","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243217-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243355-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243516-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520059-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620064-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1255765","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-11961","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-8006","title":"NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-30T23:53:11.334Z","modified":"2024-09-03T19:17:49.301Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:09.216761Z"}],"euvd":[{"id":"EUVD-2024-48881","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-30T23:53:11Z","modified":"2024-09-03T19:17:49Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T00:56:05.029422Z"}],"ghsa":[{"id":"GHSA-gj9v-677h-mwcx","title":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with...","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:31:05Z","modified":"2024-08-31T00:31:11Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:58:09.209202Z"}],"nvd":[{"id":"CVE-2024-8006","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05.743Z","modified":"2026-06-17T08:21:39.47Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:10:24.514378Z"}],"osv":[{"id":"AZL-48409","title":"CVE-2024-8006 affecting package libpcap for versions less than 1.10.5-1","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05Z","modified":"2026-04-21T04:51:15.511819Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"AZL-48412","title":"CVE-2024-8006 affecting package nmap for versions less than 7.95-2","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-05T16:41:20.514083Z"},{"id":"AZL-48438","title":"CVE-2024-8006 affecting package libpcap for versions less than 1.10.1-3","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05Z","modified":"2026-04-21T04:33:01.015535Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"AZL-48462","title":"CVE-2024-8006 affecting package nmap for versions less than 7.93-3","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05Z","modified":"2026-04-21T04:33:01.583418Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:06.032783Z"},{"id":"BELL-CVE-2024-8006","title":"CVE-2024-8006 does not affect BellSoft software","status":"withdrawn","published":"2024-09-03T05:56:35.760343Z","modified":"2026-01-26T09:47:20.543273Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:21.227396Z"},{"id":"CVE-2024-8006","title":"NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-30T23:53:11.334Z","modified":"2026-10-28T10:42:14.803176396Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:44:45.405014Z"},{"id":"DEBIAN-CVE-2024-8006","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2024-08-31T00:15:05.743Z","modified":"2026-11-02T12:03:15.309313454Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:44.747956Z"},{"id":"JLSEC-2026-765","title":"Remote packet capture support is disabled by default in libpcap","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is `pcap_findalldevs_ex()`.  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","status":"published","published":"2026-07-15T15:14:16.023Z","modified":"2026-07-25T18:24:52.933347106Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:47:19.003546Z"},{"id":"OESA-2024-2180","title":"libpcap security update","description":"This is the official web site of tcpdump, a powerful command-line  packet analyzer; and libpcap, a portable C/C++ library for  network traffic capture.\n\nSecurity Fix(es):\n\nIn affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns.  This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block.  A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.(CVE-2023-7256)\n\nRemote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.(CVE-2024-8006)","status":"published","published":"2024-09-27T11:07:39Z","modified":"2026-08-18T01:17:33.600522948Z","cvss":[{"version":"3.1","score":4.4,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"MGASA-2024-0295","title":"Updated libpcap packages fix security vulnerabilities","description":"In affected libpcap versions during the setup of a remote packet capture\nthe internal function sock_initaddress() calls getaddrinfo() and\npossibly freeaddrinfo(), but does not clearly indicate to the caller\nfunction whether freeaddrinfo() still remains to be called after the\nfunction returns. This makes it possible in some scenarios that both the\nfunction and its caller call freeaddrinfo() for the same allocated\nmemory block. (CVE-2023-7256)\nRemote packet capture support is disabled by default in libpcap. When a\nuser builds libpcap with remote packet capture support enabled, one of\nthe functions that become available is pcap_findalldevs_ex(). One of the\nfunction arguments can be a filesystem path, which normally means a\ndirectory with input data files. When the specified path cannot be used\nas a directory, the function receives NULL from opendir(), but does not\ncheck the return value and passes the NULL value to readdir(), which\ncauses a NULL pointer derefence. (CVE-2024-8006)\n","status":"published","published":"2024-09-11T20:42:44Z","modified":"2026-04-16T04:42:21.408079034Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:14309-1","title":"libpcap-devel-1.10.5-1.1 on GA media","description":"These are all security issues fixed in the libpcap-devel-1.10.5-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-09-04T00:00:00Z","modified":"2026-02-04T02:54:21.765117Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"ROOT-OS-ALPINE-320-CVE-2024-8006","title":"CVE-2024-8006 in libpcap - Patched by Root","description":"Root has patched CVE-2024-8006 in the libpcap package for Root:Alpine:3.20. Multiple fixed versions available.","status":"published","published":"2026-09-29T09:21:14Z","modified":"2026-09-29T10:16:08.053427284Z","updated_at":"2026-11-02T15:53:28.259095Z"},{"id":"SUSE-SU-2024:3210-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)\n- CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020) \n","status":"published","published":"2024-09-11T15:39:32Z","modified":"2026-02-04T03:43:44.165287Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3217-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)\n- CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)\n","status":"published","published":"2024-09-12T11:06:09Z","modified":"2026-02-04T02:40:37.09711Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3355-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n  \n- CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)\n- CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)\n","status":"published","published":"2024-09-20T14:12:25Z","modified":"2026-02-04T03:58:56.286209Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3516-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)\n- CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)\n","status":"published","published":"2024-10-03T11:33:45Z","modified":"2026-02-04T04:20:59.585382Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:20059-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2024-8006: Fixed NULL pointer dereference in pcap_findalldevs_ex() (bsc#1230034)\n- CVE-2023-7256: Fixed double free via addrinfo in sock_initaddress() (bsc#1230020)\n","status":"published","published":"2025-02-03T08:57:33Z","modified":"2026-03-23T04:48:08.811434Z","updated_at":"2026-11-02T15:53:59.381172Z"},{"id":"SUSE-SU-2026:20064-1","title":"Security update for libpcap","description":"This update for libpcap fixes the following issues:\n\n- CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to out-of-bounds\n  read and write (bsc#1255765).\n- CVE-2024-8006: missing return value check in `pcap_findalldevs_ex()` can lead to NULL pointer dereference\n  (bsc#1230034).\n- CVE-2023-7256: unclear value returned by  `sock_initaddress()` can lead to a double-free (bsc#1230020).\n","status":"published","published":"2026-01-08T16:16:36Z","modified":"2026-03-23T04:52:32.79698Z","updated_at":"2026-11-02T15:54:01.610851Z"}]}}