Double free in libpcap - CVE-2023-7256

Vulnerability identifier: #VU96669

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-7256

CWE-ID: CWE-415

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to crash the application.

The vulnerability exists due to a boundary error when configure for emote packet capture. A local user can trigger a double free error and crash the application.

libpcap
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Linux Enterprise Workstation Extension 12
Slackware Linux
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Anolis OS
Nessus Network Monitor
RecoverPoint for Virtual Machines
IBM Business Automation Manager Open Editions
libpcap-devel
libpcap-debugsource
libpcap1-debuginfo
libpcap1
libpcap1-32bit
libpcap1-debuginfo-32bit
libpcap-devel-static
libpcap-devel-32bit
libpcap1-32bit-debuginfo
libpcap-devel-64bit
libpcap1-64bit-debuginfo
libpcap1-64bit
libpcap-help
libpcap-debuginfo
libpcap
libpcap-doc

Install updates from vendor's website.

libpcap - update to 1.10.5
Nessus Network Monitor - update to 6.5.1
RecoverPoint for Virtual Machines - update to 6.0 SP2 P1
IBM Business Automation Manager Open Editions - update to 9.1.1
libpcap-devel - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-debugsource - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-debuginfo - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1 - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-32bit - addressed in versions 1.8.1-10.6.1, 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-debuginfo-32bit - update to 1.8.1-10.6.1
libpcap-devel-static - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-devel-32bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-32bit-debuginfo - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-devel-64bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-64bit-debuginfo - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap1-64bit - addressed in versions 1.9.1-150300.3.3.1, 1.10.1-150400.3.3.2, 1.10.4-150600.3.3.2
libpcap-help - update to 1.10.1-4
libpcap-devel - update to 1.10.1-4
libpcap-debugsource - update to 1.10.1-4
libpcap-debuginfo - update to 1.10.1-4
libpcap - update to 1.10.1-4
libpcap-doc - update to 1.10.4-2
libpcap-devel - update to 1.10.4-2
libpcap - update to 1.10.4-2
libpcap - update to 1.10.5

• https://github.com/the-tcpdump-group/libpcap/commit/262e4f34979872d822ccedf9f318ed89c4d31c03
• https://github.com/the-tcpdump-group/libpcap/commit/2aa69b04d8173b18a0e3492e0c8f2f7fabdf642d

• Multiple vulnerabilities in libpcap
• Slackware Linux update for libpcap
• SUSE update for libpcap
• SUSE update for libpcap
• SUSE update for libpcap
• openEuler update for libpcap
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• SUSE update for libpcap
• Dell RecoverPoint for Virtual Machines update for third-party components
• Multiple vulnerabilities in Tenable Network Monitor
• Anolis OS update for libpcap