Vulnerability-Lookup

CVE-2026-6554 (GCVE-0-2026-6554)

Vulnerability from cvelistv5 – Published: 2026-09-05 18:51 – Updated: 2026-09-08 15:15

Title

infinte loop in libpcap before 1.10.7

Summary

libpcap BPF interpreter treats the offset in the 'ja L' BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-09-08 15:14 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

Tcpdump mitre root

References

1 reference

URL	Tags
https://github.com/the-tcpdump-group/libpcap/comm…	patch

Impacted products

1 product

Vendor	Product	Version	CPE status
The Tcpdump Group	libpcap	Affected: 0 , < 1.10.7 (semver)	guessed

Credits

Kaixuan LI

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-6554",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-08T15:14:56.820512Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-08T15:15:06.137Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "BPF interpreter"
          ],
          "product": "libpcap",
          "programFiles": [
            "bpf_filter.c"
          ],
          "programRoutines": [
            {
              "name": "pcapint_filter_with_aux_data()"
            }
          ],
          "repo": "https://github.com/the-tcpdump-group/libpcap/",
          "vendor": "The Tcpdump Group",
          "versions": [
            {
              "lessThan": "1.10.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "The problem is specific to applications that use pcap_offline_filter() or bpf_filter() with an externally-supplied compiled filter program without validating the program first."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Kaixuan LI"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libpcap BPF interpreter treats the offset in the \u0027ja L\u0027 BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "A functional exploit exists."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-05T18:51:02.338Z",
        "orgId": "cfdbb673-b408-4d03-89c1-c3d73ed80896",
        "shortName": "Tcpdump"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Upgrade to libpcap 1.10.7."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "infinte loop in libpcap before 1.10.7",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cfdbb673-b408-4d03-89c1-c3d73ed80896",
    "assignerShortName": "Tcpdump",
    "cveId": "CVE-2026-6554",
    "datePublished": "2026-09-05T18:51:02.338Z",
    "dateReserved": "2026-04-17T22:00:24.313Z",
    "dateUpdated": "2026-09-08T15:15:06.137Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-6554",
      "date": "2026-09-09",
      "epss": "0.00098",
      "percentile": "0.00858"
    },
    "microsoft_vex": {
      "current_release_date": "2026-09-09T01:02:44.000Z",
      "cve": "CVE-2026-6554",
      "id": "msrc_CVE-2026-6554",
      "initial_release_date": "2026-09-07T01:02:10.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "2",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "infinte loop in libpcap before 1.10.7",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6554.json",
      "version": "4"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-6554\",\"sourceIdentifier\":\"security@tcpdump.org\",\"published\":\"2026-09-05T19:16:56.067\",\"lastModified\":\"2026-09-08T19:20:25.117\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"libpcap BPF interpreter treats the offset in the \u0027ja L\u0027 BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.\"}],\"affected\":[{\"source\":\"security@tcpdump.org\",\"affectedData\":[{\"vendor\":\"The Tcpdump Group\",\"product\":\"libpcap\",\"defaultStatus\":\"unaffected\",\"modules\":[\"BPF interpreter\"],\"programFiles\":[\"bpf_filter.c\"],\"programRoutines\":[{\"name\":\"pcapint_filter_with_aux_data()\"}],\"repo\":\"https://github.com/the-tcpdump-group/libpcap/\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.10.7\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security@tcpdump.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-09-08T15:14:56.820512Z\",\"id\":\"CVE-2026-6554\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security@tcpdump.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"references\":[{\"url\":\"https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce\",\"source\":\"security@tcpdump.org\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-09T16:11:01+00:00",
      "cve": "CVE-2026-6554",
      "id": "CVE-2026-6554",
      "initial_release_date": "2026-09-05T18:51:02.338000+00:00",
      "product_status:known_affected": "13",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "libpcap: libpcap: Denial of Service via infinite loop in BPF interpreter",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-6554.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "low",
      "current_release_date": "2026-09-09T00:27:37Z",
      "cve": "CVE-2026-6554",
      "id": "CVE-2026-6554",
      "initial_release_date": "2026-09-09T00:27:37Z",
      "product_status:known_affected": "131",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-6554",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-6554.json",
      "version": "2"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-6554\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T15:14:56.820512Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T15:15:00.849Z\"}}], \"cna\": {\"title\": \"infinte loop in libpcap before 1.10.7\", \"source\": {\"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Kaixuan LI\"}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.5, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"repo\": \"https://github.com/the-tcpdump-group/libpcap/\", \"vendor\": \"The Tcpdump Group\", \"modules\": [\"BPF interpreter\"], \"product\": \"libpcap\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.10.7\", \"versionType\": \"semver\"}], \"programFiles\": [\"bpf_filter.c\"], \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"pcapint_filter_with_aux_data()\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"A functional exploit exists.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to libpcap 1.10.7.\"}], \"references\": [{\"url\": \"https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce\", \"tags\": [\"patch\"]}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"libpcap BPF interpreter treats the offset in the \u0027ja L\u0027 BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-835\", \"description\": \"CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)\"}]}], \"configurations\": [{\"lang\": \"en\", \"value\": \"The problem is specific to applications that use pcap_offline_filter() or bpf_filter() with an externally-supplied compiled filter program without validating the program first.\"}], \"providerMetadata\": {\"orgId\": \"cfdbb673-b408-4d03-89c1-c3d73ed80896\", \"shortName\": \"Tcpdump\", \"dateUpdated\": \"2026-09-05T18:51:02.338Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-6554\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-08T15:15:06.137Z\", \"dateReserved\": \"2026-04-17T22:00:24.313Z\", \"assignerOrgId\": \"cfdbb673-b408-4d03-89c1-c3d73ed80896\", \"datePublished\": \"2026-09-05T18:51:02.338Z\", \"assignerShortName\": \"Tcpdump\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-6554

Vulnerability from fkie_nvd - Published: 2026-09-05 19:16 - Updated: 2026-09-08 19:20

Severity

5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Summary

References

	URL	Tags
	security@tcpdump.org	https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "BPF interpreter"
          ],
          "product": "libpcap",
          "programFiles": [
            "bpf_filter.c"
          ],
          "programRoutines": [
            {
              "name": "pcapint_filter_with_aux_data()"
            }
          ],
          "repo": "https://github.com/the-tcpdump-group/libpcap/",
          "vendor": "The Tcpdump Group",
          "versions": [
            {
              "lessThan": "1.10.7",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@tcpdump.org"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "libpcap BPF interpreter treats the offset in the \u0027ja L\u0027 BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely."
    }
  ],
  "id": "CVE-2026-6554",
  "lastModified": "2026-09-08T19:20:25.117",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6,
        "source": "security@tcpdump.org",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-6554",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-09-08T15:14:56.820512Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-09-05T19:16:56.067",
  "references": [
    {
      "source": "security@tcpdump.org",
      "url": "https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce"
    }
  ],
  "sourceIdentifier": "security@tcpdump.org",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-835"
        }
      ],
      "source": "security@tcpdump.org",
      "type": "Secondary"
    }
  ]
}

GHSA-2C9F-8WHQ-V3FC

Vulnerability from github – Published: 2026-09-05 21:31 – Updated: 2026-09-05 21:31

Details

Severity

5.5 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-6554"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-835"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-09-05T19:16:56Z",
    "severity": "MODERATE"
  },
  "details": "libpcap BPF interpreter treats the offset in the \u0027ja L\u0027 BPF instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations.  In particular uncommon use cases a crafted filter program can cause the interpreter to loop infinitely.",
  "id": "GHSA-2c9f-8whq-v3fc",
  "modified": "2026-09-05T21:31:19Z",
  "published": "2026-09-05T21:31:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6554"
    },
    {
      "type": "WEB",
      "url": "https://github.com/the-tcpdump-group/libpcap/commit/ff3c83475ac303c6b681c52ad0b6e14795a8e0ce"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

MSRC_CVE-2026-6554

Vulnerability from csaf_microsoft - Published: 2026-09-07 01:02 - Updated: 2026-09-09 01:02

Summary

infinte loop in libpcap before 1.10.7

Notes

Additional Resources: To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle

Disclaimer: The information provided in the Microsoft Knowledge Base is provided \"as is\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.

CVE-2026-6554

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Affected products

Fixed 1 product

Product	Identifier	Version	Remediation
Unresolved product id: 21802-17084		—

Known affected 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 17084-1		—	Vendor Fix
Unresolved product id: 17084-2		—	None Available

References

4 references

URL	Category
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self
https://support.microsoft.com/lifecycle	external
https://www.first.org/cvss	external
https://msrc.microsoft.com/csaf/vex/2026/msrc_cve…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2026-6554 infinte loop in libpcap before 1.10.7 - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6554.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "infinte loop in libpcap before 1.10.7",
    "tracking": {
      "current_release_date": "2026-09-09T01:02:44.000Z",
      "generator": {
        "date": "2026-09-09T07:05:16.702Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2026-6554",
      "initial_release_date": "2026-09-07T01:02:10.000Z",
      "revision_history": [
        {
          "date": "2026-09-07T01:02:10.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        },
        {
          "date": "2026-09-07T14:49:57.000Z",
          "legacy_version": "2",
          "number": "2",
          "summary": "Information published."
        },
        {
          "date": "2026-09-08T02:00:08.000Z",
          "legacy_version": "3",
          "number": "3",
          "summary": "Information published."
        },
        {
          "date": "2026-09-09T01:02:44.000Z",
          "legacy_version": "4",
          "number": "4",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.0",
                "product": {
                  "name": "Azure Linux 3.0",
                  "product_id": "17084"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003cazl3 libpcap 0:1.10.6-1.azl3",
                "product": {
                  "name": "\u003cazl3 libpcap 0:1.10.6-1.azl3",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "azl3 libpcap 0:1.10.6-1.azl3",
                "product": {
                  "name": "azl3 libpcap 0:1.10.6-1.azl3",
                  "product_id": "21802"
                }
              }
            ],
            "category": "product_name",
            "name": "libpcap"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "azl3 nmap 0:7.95-4.azl3",
                "product": {
                  "name": "azl3 nmap 0:7.95-4.azl3",
                  "product_id": "2"
                }
              }
            ],
            "category": "product_name",
            "name": "nmap"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003cazl3 libpcap 0:1.10.6-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 libpcap 0:1.10.6-1.azl3 as a component of Azure Linux 3.0",
          "product_id": "21802-17084"
        },
        "product_reference": "21802",
        "relates_to_product_reference": "17084"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "azl3 nmap 0:7.95-4.azl3 as a component of Azure Linux 3.0",
          "product_id": "17084-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "17084"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-6554",
      "cwe": {
        "id": "CWE-835",
        "name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
      },
      "notes": [
        {
          "category": "general",
          "text": "Tcpdump",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "21802-17084"
        ],
        "known_affected": [
          "17084-1",
          "17084-2"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2026-6554 infinte loop in libpcap before 1.10.7 - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-6554.json"
        }
      ],
      "remediations": [
        {
          "category": "none_available",
          "date": "2026-09-07T01:02:10.000Z",
          "details": "There is no fix available for this vulnerability as of now",
          "product_ids": [
            "17084-2"
          ]
        },
        {
          "category": "vendor_fix",
          "date": "2026-09-07T01:02:10.000Z",
          "details": "0:1.10.7-1.azl3:Security Update",
          "product_ids": [
            "17084-1"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "17084-1",
            "17084-2"
          ]
        }
      ],
      "title": "infinte loop in libpcap before 1.10.7"
    }
  ]
}

ubuntu-cve-2026-6554

Vulnerability from osv_ubuntu

Published

2026-09-07 00:00

Modified

2026-09-07 11:36

Summary

Details

(libpcap BPF interpreter treats the offset in the 'ja L' BPF instructio ...)

Severity

5.5 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-6554	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-6554	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8",
            "binary_version": "1.5.3-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.5.3-2ubuntu0.1?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.4.0-2",
        "1.5.1-1",
        "1.5.2-1",
        "1.5.3-1",
        "1.5.3-2",
        "1.5.3-2ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8",
            "binary_version": "1.7.4-2ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.7.4-2ubuntu0.1?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.7.4-1",
        "1.7.4-2",
        "1.7.4-2ubuntu0.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8",
            "binary_version": "1.8.1-6ubuntu1.18.04.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.8.1-6ubuntu1.18.04.2?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.8.1-5ubuntu1",
        "1.8.1-6ubuntu1",
        "1.8.1-6ubuntu1.18.04.1",
        "1.8.1-6ubuntu1.18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8",
            "binary_version": "1.9.1-3ubuntu1.20.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:20.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.9.1-3ubuntu1.20.04.1?arch=source\u0026distro=focal"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.9.1-2",
        "1.9.1-3",
        "1.9.1-3ubuntu1.20.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8",
            "binary_version": "1.10.1-4ubuntu1.22.04.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:22.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.10.1-4ubuntu1.22.04.1?arch=source\u0026distro=jammy"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.0-2build1",
        "1.10.1-4",
        "1.10.1-4build1",
        "1.10.1-4ubuntu1.22.04.1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8t64",
            "binary_version": "1.10.4-4.1ubuntu3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:24.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.10.4-4.1ubuntu3?arch=source\u0026distro=noble"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.4-4",
        "1.10.4-4ubuntu3",
        "1.10.4-4.1ubuntu2",
        "1.10.4-4.1ubuntu3"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libpcap0.8t64",
            "binary_version": "1.10.6-1ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "libpcap",
        "purl": "pkg:deb/ubuntu/libpcap@1.10.6-1ubuntu1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.10.5-2ubuntu2",
        "1.10.5-2ubuntu3",
        "1.10.6-1ubuntu1"
      ]
    }
  ],
  "aliases": [],
  "details": "(libpcap BPF interpreter treats the offset in the \u0026#x27;ja L\u0026#x27; BPF instructio ...)",
  "id": "UBUNTU-CVE-2026-6554",
  "modified": "2026-09-07T11:36:09Z",
  "published": "2026-09-07T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-6554"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-6554"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-6554"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-6554 (GCVE-0-2026-6554)

FKIE_CVE-2026-6554

GHSA-2C9F-8WHQ-V3FC

MSRC_CVE-2026-6554

ubuntu-cve-2026-6554

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature