NULL pointer dereference in libpcap - CVE-2024-8006

Vulnerability identifier: #VU96667

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-8006

CWE-ID: CWE-476

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the pcap_findalldevs_ex() function in pcap.c. A local user can perform a denial of service (DoS) attack.

libpcap
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Anolis OS
Oracle Communications Operations Monitor
IBM Business Automation Manager Open Editions
Nessus Network Monitor
RecoverPoint for Virtual Machines
Communications Unified Assurance
Oracle SD-WAN Edge
Oracle Communications Cloud Native Core Network Exposure Function
Oracle Communications Cloud Native Core Security Edge Protection Proxy
libpcap-devel
libpcap-debugsource
libpcap1-debuginfo
libpcap1
libpcap1-32bit
libpcap1-debuginfo-32bit
libpcap-devel-static
libpcap-devel-32bit
libpcap1-32bit-debuginfo
libpcap-devel-64bit
libpcap1-64bit-debuginfo
libpcap1-64bit
libpcap-help
libpcap-debuginfo
libpcap
libpcap-doc

Install updates from vendor's website.

libpcap - update to 1.10.5
Nessus Network Monitor - update to 6.5.1
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Business Automation Manager Open Editions - update to 9.1.1
libpcap-devel - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-debugsource - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-debuginfo - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1 - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-32bit - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-debuginfo-32bit - update to 1.8.1-10.6.1
libpcap-devel-static - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-devel-32bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-32bit-debuginfo - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-devel-64bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-64bit-debuginfo - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-64bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-help - update to 1.10.1-4
libpcap-devel - update to 1.10.1-4
libpcap-debugsource - update to 1.10.1-4
libpcap-debuginfo - update to 1.10.1-4
libpcap - update to 1.10.1-4
libpcap-doc - update to 1.10.4-2
libpcap-devel - update to 1.10.4-2
libpcap - update to 1.10.4-2
libpcap - update to 1.10.5

• https://github.com/the-tcpdump-group/libpcap/commit/0f8a103469ce87d2b8d68c5130a46ddb7fb5eb29
• https://github.com/the-tcpdump-group/libpcap/commit/8a633ee5b9ecd9d38a587ac9b204e2380713b0d6

• Multiple vulnerabilities in libpcap
• Slackware Linux update for libpcap
• SUSE update for libpcap
• SUSE update for libpcap
• SUSE update for libpcap
• openEuler update for libpcap
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• SUSE update for libpcap
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle SD-WAN Edge
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in Tenable Network Monitor
• Anolis OS update for libpcap
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Exposure Function
• Multiple vulnerabilities in Communications Unified Assurance