Medium severity5.0NVD Advisory· Published Sep 5, 2026· Updated Sep 8, 2026
CVE-2026-18238
CVE-2026-18238
Description
The rpcap client code that processes a RPCAP_MSG_PACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the captured packet.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versionspkg:rpm/opensuse/libpcap&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/libpcap&distro=openSUSE%20Tumbleweed
< 1.10.5-160000.5.1+ 1 more
- (no CPE)range: < 1.10.5-160000.5.1
- (no CPE)range: < 1.10.7-1.1
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.