Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
8 vulnerabilities by seladb
CVE-2026-13590 (GCVE-0-2026-13590)
Vulnerability from nvd – Published: 2026-06-29 16:45 – Updated: 2026-06-29 16:45 X_Open Source
VLAI
Title
seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow
Summary
A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454. Applying a patch is advised to resolve this issue.
Severity
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374593 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374593/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13590 | third-party-advisory |
| https://vuldb.com/submit/844483 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2155 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2159 | issue-trackingpatch |
| https://github.com/user-attachments/files/2824904… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/4c9… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"Modbus Protocol Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454. Applying a patch is advised to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:45:11.826Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374593 | seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374593"
},
{
"name": "VDB-374593 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374593/cti"
},
{
"name": "CVE-2026-13590 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13590"
},
{
"name": "Submit #844483 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844483"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2155"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2159"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28249048/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:51.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13590",
"datePublished": "2026-06-29T16:45:11.826Z",
"dateReserved": "2026-06-29T04:25:34.242Z",
"dateUpdated": "2026-06-29T16:45:11.826Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13589 (GCVE-0-2026-13589)
Vulnerability from nvd – Published: 2026-06-29 16:30 – Updated: 2026-06-29 17:22 X_Open Source
VLAI
Title
seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow
Summary
A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is publicly available and might be used. The identifier of the patch is 98e671010bc7c87b95898c22ae289220ae92542b. It is recommended to apply a patch to fix this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374592 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374592/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13589 | third-party-advisory |
| https://vuldb.com/submit/844482 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2152 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2161 | issue-trackingpatch |
| https://github.com/user-attachments/files/2821457… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/98e… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13589",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:22:20.854046Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:22:25.841Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"Telnet Subnegotiation Packet Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is publicly available and might be used. The identifier of the patch is 98e671010bc7c87b95898c22ae289220ae92542b. It is recommended to apply a patch to fix this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:30:10.989Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374592 | seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374592"
},
{
"name": "VDB-374592 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374592/cti"
},
{
"name": "CVE-2026-13589 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13589"
},
{
"name": "Submit #844482 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844482"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2152"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2161"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28214571/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/98e671010bc7c87b95898c22ae289220ae92542b"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:48.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13589",
"datePublished": "2026-06-29T16:30:10.989Z",
"dateReserved": "2026-06-29T04:25:29.590Z",
"dateUpdated": "2026-06-29T17:22:25.841Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13588 (GCVE-0-2026-13588)
Vulnerability from nvd – Published: 2026-06-29 16:15 – Updated: 2026-06-29 17:41 X_Open Source
VLAI
Title
seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow
Summary
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to heap-based buffer overflow. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. This patch is called 98e671010bc7c87b95898c22ae289220ae92542b. It is best practice to apply a patch to resolve this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374591 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374591/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13588 | third-party-advisory |
| https://vuldb.com/submit/844481 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2151 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2161 | issue-trackingpatch |
| https://github.com/user-attachments/files/2821347… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/98e… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13588",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:41:34.458106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:41:43.683Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"TLS Hello Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to heap-based buffer overflow. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. This patch is called 98e671010bc7c87b95898c22ae289220ae92542b. It is best practice to apply a patch to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:15:12.047Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374591 | seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374591"
},
{
"name": "VDB-374591 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374591/cti"
},
{
"name": "CVE-2026-13588 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13588"
},
{
"name": "Submit #844481 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844481"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2151"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2161"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28213479/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/98e671010bc7c87b95898c22ae289220ae92542b"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:45.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13588",
"datePublished": "2026-06-29T16:15:12.047Z",
"dateReserved": "2026-06-29T04:25:26.770Z",
"dateUpdated": "2026-06-29T17:41:43.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13587 (GCVE-0-2026-13587)
Vulnerability from nvd – Published: 2026-06-29 16:00 – Updated: 2026-06-29 17:41
VLAI
Title
seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
Summary
A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374590 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374590/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13587 | third-party-advisory |
| https://vuldb.com/submit/844479 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2149 | issue-tracking |
| https://github.com/user-attachments/files/2820796… | exploit |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13587",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:41:35.368010Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:41:45.157Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"LightPcapNg Parser"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack\u0027s complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:00:11.058Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374590 | seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374590"
},
{
"name": "VDB-374590 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374590/cti"
},
{
"name": "CVE-2026-13587 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13587"
},
{
"name": "Submit #844479 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844479"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2149"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28207967/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:43.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13587",
"datePublished": "2026-06-29T16:00:11.058Z",
"dateReserved": "2026-06-29T04:25:24.076Z",
"dateUpdated": "2026-06-29T17:41:45.157Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13590 (GCVE-0-2026-13590)
Vulnerability from cvelistv5 – Published: 2026-06-29 16:45 – Updated: 2026-06-29 16:45 X_Open Source
VLAI
Title
seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow
Summary
A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454. Applying a patch is advised to resolve this issue.
Severity
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374593 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374593/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13590 | third-party-advisory |
| https://vuldb.com/submit/844483 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2155 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2159 | issue-trackingpatch |
| https://github.com/user-attachments/files/2824904… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/4c9… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"Modbus Protocol Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security flaw has been discovered in seladb PcapPlusPlus 25.05. This impacts the function pcpp::ModbusLayer::getLength in the library Packet++/header/ModbusLayer.h of the component Modbus Protocol Handler. The manipulation of the argument length results in heap-based buffer overflow. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been released to the public and may be used for attacks. The patch is identified as 4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454. Applying a patch is advised to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:45:11.826Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374593 | seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374593"
},
{
"name": "VDB-374593 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374593/cti"
},
{
"name": "CVE-2026-13590 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13590"
},
{
"name": "Submit #844483 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844483"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2155"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2159"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28249048/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/4c90c3e3418a2b09dc82b7ca5775e9c1e22fe454"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:51.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus Modbus Protocol ModbusLayer.h getLength heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13590",
"datePublished": "2026-06-29T16:45:11.826Z",
"dateReserved": "2026-06-29T04:25:34.242Z",
"dateUpdated": "2026-06-29T16:45:11.826Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13589 (GCVE-0-2026-13589)
Vulnerability from cvelistv5 – Published: 2026-06-29 16:30 – Updated: 2026-06-29 17:22 X_Open Source
VLAI
Title
seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow
Summary
A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is publicly available and might be used. The identifier of the patch is 98e671010bc7c87b95898c22ae289220ae92542b. It is recommended to apply a patch to fix this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374592 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374592/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13589 | third-party-advisory |
| https://vuldb.com/submit/844482 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2152 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2161 | issue-trackingpatch |
| https://github.com/user-attachments/files/2821457… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/98e… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13589",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:22:20.854046Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:22:25.841Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"Telnet Subnegotiation Packet Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was identified in seladb PcapPlusPlus 25.05. This affects the function pcpp::TelnetLayer::getSubCommand of the file Packet++/src/TelnetLayer.cpp of the component Telnet Subnegotiation Packet Handler. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is reported as difficult. The exploit is publicly available and might be used. The identifier of the patch is 98e671010bc7c87b95898c22ae289220ae92542b. It is recommended to apply a patch to fix this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:30:10.989Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374592 | seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374592"
},
{
"name": "VDB-374592 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374592/cti"
},
{
"name": "CVE-2026-13589 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13589"
},
{
"name": "Submit #844482 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844482"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2152"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2161"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28214571/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/98e671010bc7c87b95898c22ae289220ae92542b"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:48.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus Telnet Subnegotiation Packet TelnetLayer.cpp getSubCommand heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13589",
"datePublished": "2026-06-29T16:30:10.989Z",
"dateReserved": "2026-06-29T04:25:29.590Z",
"dateUpdated": "2026-06-29T17:22:25.841Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13588 (GCVE-0-2026-13588)
Vulnerability from cvelistv5 – Published: 2026-06-29 16:15 – Updated: 2026-06-29 17:41 X_Open Source
VLAI
Title
seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow
Summary
A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to heap-based buffer overflow. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. This patch is called 98e671010bc7c87b95898c22ae289220ae92542b. It is best practice to apply a patch to resolve this issue.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
9 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374591 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374591/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13588 | third-party-advisory |
| https://vuldb.com/submit/844481 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2151 | issue-tracking |
| https://github.com/seladb/PcapPlusPlus/pull/2161 | issue-trackingpatch |
| https://github.com/user-attachments/files/2821347… | exploit |
| https://github.com/seladb/PcapPlusPlus/commit/98e… | patch |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13588",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:41:34.458106Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:41:43.683Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"TLS Hello Handler"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in seladb PcapPlusPlus 25.05. The impacted element is the function pcpp::SSLClientHelloMessage::getHandshakeVersion of the file Packet++/src/SSLHandshake.cpp of the component TLS Hello Handler. Executing a manipulation of the argument handshakeVersion can lead to heap-based buffer overflow. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been publicly disclosed and may be utilized. This patch is called 98e671010bc7c87b95898c22ae289220ae92542b. It is best practice to apply a patch to resolve this issue."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5.1,
"vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:15:12.047Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374591 | seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374591"
},
{
"name": "VDB-374591 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374591/cti"
},
{
"name": "CVE-2026-13588 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13588"
},
{
"name": "Submit #844481 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844481"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2151"
},
{
"tags": [
"issue-tracking",
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/pull/2161"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28213479/poc.zip"
},
{
"tags": [
"patch"
],
"url": "https://github.com/seladb/PcapPlusPlus/commit/98e671010bc7c87b95898c22ae289220ae92542b"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"tags": [
"x_open-source"
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:45.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus TLS Hello SSLHandshake.cpp getHandshakeVersion heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13588",
"datePublished": "2026-06-29T16:15:12.047Z",
"dateReserved": "2026-06-29T04:25:26.770Z",
"dateUpdated": "2026-06-29T17:41:43.683Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-13587 (GCVE-0-2026-13587)
Vulnerability from cvelistv5 – Published: 2026-06-29 16:00 – Updated: 2026-06-29 17:41
VLAI
Title
seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow
Summary
A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/374590 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/374590/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-13587 | third-party-advisory |
| https://vuldb.com/submit/844479 | third-party-advisory |
| https://github.com/seladb/PcapPlusPlus/issues/2149 | issue-tracking |
| https://github.com/user-attachments/files/2820796… | exploit |
| https://github.com/seladb/PcapPlusPlus/ | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| seladb | PcapPlusPlus |
Affected:
25.05
cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-13587",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-29T17:41:35.368010Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T17:41:45.157Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:seladb:pcapplusplus:*:*:*:*:*:*:*:*"
],
"modules": [
"LightPcapNg Parser"
],
"product": "PcapPlusPlus",
"vendor": "seladb",
"versions": [
{
"status": "affected",
"version": "25.05"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "TYGLS (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in seladb PcapPlusPlus 25.05. The affected element is the function parse_by_block_type of the file light_pcapng.c of the component LightPcapNg Parser. Performing a manipulation of the argument captured_packet_length results in heap-based buffer overflow. It is possible to initiate the attack remotely. The attack\u0027s complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 2.6,
"vectorString": "AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-29T16:00:11.058Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-374590 | seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/374590"
},
{
"name": "VDB-374590 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/374590/cti"
},
{
"name": "CVE-2026-13587 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-13587"
},
{
"name": "Submit #844479 | PcapPlusPlus v25.05 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/844479"
},
{
"tags": [
"issue-tracking"
],
"url": "https://github.com/seladb/PcapPlusPlus/issues/2149"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/user-attachments/files/28207967/poc.zip"
},
{
"tags": [
"product"
],
"url": "https://github.com/seladb/PcapPlusPlus/"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-29T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-29T06:30:43.000Z",
"value": "VulDB entry last update"
}
],
"title": "seladb PcapPlusPlus LightPcapNg light_pcapng.c parse_by_block_type heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-13587",
"datePublished": "2026-06-29T16:00:11.058Z",
"dateReserved": "2026-06-29T04:25:24.076Z",
"dateUpdated": "2026-06-29T17:41:45.157Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}