CVE-2026-18313

A flaw was found in libpcap, specifically within the rpcapd daemon. This vulnerability allows a remote attacker to cause a denial of service (DoS) by sending specially crafted RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ messages. The rpcapd daemon allocates memory for these messages but fails to free it, leading to a memory leak. Over time, this can exhaust available memory, making the service unavailable.

This Moderate impact memory leak in the rpcapd daemon, part of libpcap, can lead to a denial of service on Red Hat systems. A remote attacker with low privileges can send specially crafted RPCAP messages, causing rpcapd to continuously allocate memory without freeing it. This can exhaust system resources, rendering the service unavailable. The vulnerability is present when the rpcapd service is running and accessible over the network.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.