Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Dora Sweet

#50777of 53,633
4.4Total CVSS
Vulnerabilities · 1
PT-2024-6379
4.4
2024-08-30
Libpcap · Libpcap · CVE-2023-7256
**Name of the Vulnerable Software and Affected Versions** libpcap versions (affected versions not specified) **Description** The issue is related to the function `freeaddrinfo()` in the libpcap library, where it is called for the same allocated memory block, potentially leading to a denial of service. During the setup of a remote packet capture, the internal function `sock initaddress()` calls `getaddrinfo()` and possibly `freeaddrinfo()`, but does not clearly indicate to the caller function whether `freeaddrinfo()` still remains to be called after the function returns. This can cause both the function and its caller to call `freeaddrinfo()` for the same allocated memory block. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.