| Release | Version |
|---|---|
| bookworm | 1.10.3-1 |
| trixie | 1.10.5-2 |
| forky | 1.10.7-1 |
| sid | 1.10.7-1 |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-31912 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | libpcap BPF interpreter detects neither reaching the end of the filter ... |
| CVE-2026-31911 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | libpcap BPF interpreter calls abort() if it encounters a BPF instructi ... |
| CVE-2026-6554 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | libpcap BPF interpreter treats the offset in the 'ja L' BPF instructio ... |
| CVE-2026-6244 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | libpcap BPF interpreter for the 'div #k' and 'mod #k' ALU instructions ... |
| CVE-2026-0799 | vulnerable (no DSA, postponed) | vulnerable (no DSA) | fixed | fixed | In BPF instructions that load/store a value from/to a scratch memory r ... |
| CVE-2025-11961 | vulnerable (no DSA) | vulnerable (no DSA) | fixed | fixed | pcap_ether_aton() is an auxiliary function in libpcap, it takes a stri ... |
| Bug | bookworm | trixie | forky | sid | Description |
|---|---|---|---|---|---|
| CVE-2026-18313 | vulnerable | vulnerable | fixed | fixed | rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_ ... |
| CVE-2026-18238 | vulnerable | vulnerable | fixed | fixed | The rpcap client code that processes a RPCAP_MSG_PACKET message receiv ... |
| CVE-2024-8006 | vulnerable | fixed | fixed | fixed | Remote packet capture support is disabled by default in libpcap. When ... |
| CVE-2023-7256 | vulnerable | fixed | fixed | fixed | In affected libpcap versions during the setup of a remote packet captu ... |
| Bug | Description |
|---|---|
| CVE-2025-11964 | On Windows only, if libpcap needs to convert a Windows error message t ... |
| CVE-2019-15165 | sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB ... |
| CVE-2019-15164 | rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may ... |
| CVE-2019-15163 | rpcapd/daemon.c in libpcap before 1.9.1 allows attackers to cause a de ... |
| CVE-2019-15162 | rpcapd/daemon.c in libpcap before 1.9.1 on non-Windows platforms provi ... |
| CVE-2019-15161 | rpcapd/daemon.c in libpcap before 1.9.1 mishandles certain length valu ... |
| CVE-2011-1935 | pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d94372 ... |
| DSA / DLA | Description |
|---|---|
| DLA-2850-1 | libpcap - security update |
| DLA-1967-1 | libpcap - security update |