PT-2026-86444

CVE-2026-31912

·

تاريخ النشر

2026-09-05

·

تاريخ التحديث

2026-09-25

الوصف من

CVSS 3.1
8.7
عالية
المقاييسAV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H
Name of the Vulnerable Software and Affected Versions libpcap (affected versions not specified)
Description The BPF interpreter fails to detect when the end of the filter program buffer is reached due to a missing return instruction, or when a jump instruction uses an offset that points outside the buffer. In specific uncommon scenarios, a crafted filter program can force the interpreter to read OS process memory within a 32GiB range around the buffer on 64-bit architectures, or across the entire address space on 32-bit architectures.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
AZL-99741
AZL-99921
ECHO-C577-82F0-747C
OESA-2026-3988
OESA-2026-3989
OESA-2026-3990
OESA-2026-3991
OESA-2026-4100
OPENSUSE-SU-2026:11744-1
OPENSUSE-SU-2026:21940-1
SUSE-SU-2026:23737-1
SUSE-SU-2026:23829-1
SUSE-SU-2026:23892-1
SUSE-SU-2026:23907-1
SUSE-SU-2026:4188-1
SUSE-SU-2026:4194-1
SUSE-SU-2026:4195-1
SUSE-SU-2026:4239-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾