{"id":"CVE-2024-8006","state":"PUBLISHED","title":"NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support","description":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.","publishedAt":"2024-08-30T23:53:11.334Z","updatedAt":"2024-09-03T19:17:49.301Z","severity":{"score":4.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","source":"Tcpdump"},"assigner":"Tcpdump","products":["The Tcpdump Group libpcap"],"affected":[{"vendor":"The Tcpdump Group","product":"libpcap","defaultStatus":"unaffected","versions":[{"version":"1.9.x","status":"affected"},{"version":"1.10.x","status":"affected","lessThanOrEqual":"1.10.4","versionType":"semver"}],"modules":["remote packet capture"],"programRoutines":[{"name":"pcap_findalldevs_ex()"}],"repo":"https://github.com/the-tcpdump-group/libpcap/"}],"references":["https://github.com/the-tcpdump-group/libpcap/commit/0f8a103469ce87d2b8d68c5130a46ddb7fb5eb29","https://github.com/the-tcpdump-group/libpcap/commit/8a633ee5b9ecd9d38a587ac9b204e2380713b0d6"],"weaknesses":["CWE-476"],"ingestedAt":"2026-10-29T20:08:20.985Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/8xxx/CVE-2024-8006.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-8006","state":"PUBLISHED","datePublished":"2024-08-30T23:53:11.334Z","dateUpdated":"2024-09-03T19:17:49.301Z","assignerShortName":"Tcpdump","assignerOrgId":"cfdbb673-b408-4d03-89c1-c3d73ed80896","dateReserved":"2024-08-20T09:58:58.455Z"},"containers":{"cna":{"title":"NULL pointer dereference in libpcap before 1.10.5 with remote packet capture support","descriptions":[{"lang":"en","value":"Remote packet capture support is disabled by default in libpcap.  When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex().  One of the function arguments can be a filesystem path, which normally means a directory with input data files.  When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence."}],"affected":[{"vendor":"The Tcpdump Group","product":"libpcap","defaultStatus":"unaffected","versions":[{"version":"1.9.x","status":"affected"},{"version":"1.10.x","status":"affected","lessThanOrEqual":"1.10.4","versionType":"semver"}],"modules":["remote packet capture"],"programRoutines":[{"name":"pcap_findalldevs_ex()"}],"repo":"https://github.com/the-tcpdump-group/libpcap/"}],"references":[{"url":"https://github.com/the-tcpdump-group/libpcap/commit/0f8a103469ce87d2b8d68c5130a46ddb7fb5eb29","tags":["patch"]},{"url":"https://github.com/the-tcpdump-group/libpcap/commit/8a633ee5b9ecd9d38a587ac9b204e2380713b0d6","tags":["patch"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH","baseSeverity":"MEDIUM","baseScore":4.4,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-476","description":"CWE-476 NULL Pointer Dereference","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Tcpdump","orgId":"cfdbb673-b408-4d03-89c1-c3d73ed80896","dateUpdated":"2024-08-30T23:53:11.334Z"},"configurations":[{"lang":"en","value":"The problem is specific to the remote packet capture code, which is not enabled in the default build configuration."}],"credits":[{"lang":"en","type":"finder","value":"Flavio Toffalini"},{"lang":"en","type":"reporter","value":"Nicolas Badoux"}],"exploits":[{"lang":"en","value":"A functional exploit exists."}],"solutions":[{"lang":"en","value":"Upgrade to libpcap 1.10.5."}],"source":{"discovery":"EXTERNAL"},"workarounds":[{"lang":"en","value":"Do not build libpcap with remote packet capture support."}]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-03T19:17:39.415802Z","id":"CVE-2024-8006","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-03T19:17:49.301Z"}}]}}}