Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-8006— NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support

Quick assessment

Affected
The Tcpdump Group libpcap
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

libpcap是Tcpdump团队的一款用于网络流量捕获的便携式C/C ++库。 libpcap存在代码问题漏洞，该漏洞源于pcap_findalldevs_ex()函数中对文件系统路径的处理不当，当指定路径不能作为目录使用时，函数未检查opendir()的返回值并直接将NULL值传递给readdir()，从而导致空指针解引用。

CVSS 4.4 · Medium EPSS 0.24% · P14

Possible ATT&CK Techniques 1 AI

T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-8006

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support
Source: CVE Program / CVE List V5
Vulnerability Description
Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Vulnerability Title
libpcap 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libpcap是Tcpdump团队的一款用于网络流量捕获的便携式C/C ++库。 libpcap存在代码问题漏洞，该漏洞源于pcap_findalldevs_ex()函数中对文件系统路径的处理不当，当指定路径不能作为目录使用时，函数未检查opendir()的返回值并直接将NULL值传递给readdir()，从而导致空指针解引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
The Tcpdump Group libpcap 1.9.x -

II. Public POCs for CVE-2024-8006

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-8006

请登录查看更多情报信息。

IV. Related Vulnerabilities

Same product: libpcap
Same vendor: The Tcpdump Group
Same weakness: CWE-476

V. Comments for CVE-2024-8006

No comments yet

Leave a comment