Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2024-8006
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support
Source: NVD (National Vulnerability Database)
Vulnerability Description
Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
空指针解引用
Source: NVD (National Vulnerability Database)
Vulnerability Title
libpcap 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libpcap是Tcpdump团队的一款用于网络流量捕获的便携式C/C ++库。 libpcap存在代码问题漏洞,该漏洞源于pcap_findalldevs_ex()函数中对文件系统路径的处理不当,当指定路径不能作为目录使用时,函数未检查opendir()的返回值并直接将NULL值传递给readdir(),从而导致空指针解引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
The Tcpdump Grouplibpcap 1.9.x -
II. Public POCs for CVE-2024-8006
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2024-8006
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2024-8006

No comments yet


Leave a comment