CVE-2026-18313

Name	CVE-2026-18313
Description	rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1146825

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libpcap (PTS)	bookworm	1.10.3-1	vulnerable
	trixie	1.10.5-2	vulnerable
	forky, sid	1.10.7-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
libpcap	source	(unstable)	1.10.7-1	unimportant		1146825

Notes

Fixed by: https://github.com/the-tcpdump-group/libpcap/commit/f9775af1a0ec76db60c7213241e6b48f1be10ac7 (libpcap-1.10.7)
https://www.openwall.com/lists/oss-security/2026/09/09/2
Debian binary packages not built with experimental --enable-remote