CVE catalog

CVE-2023-7256

libpcap: CVE-2023-7256

[CVE catalog]

Severity
Medium · CVSS 6.4CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibpcapsid1.11.0-1fixed
Debianlibpcapforky1.11.0-1fixed
Debianlibpcaptrixie1.10.5-2fixed
Debianlibpcapbookworm1.10.3-1vulnerable
Suselibpcaplinux micro 6.11.10.4-slfo.1.1_2.1fixed
Suselibpcaplinux micro 6.01.10.4-3.1fixed
Suselibpcaplinux enterprise micro 5.11.9.1-150300.3.3.1fixed
Suselibpcaplinux enterprise micro 5.21.9.1-150300.3.3.1fixed
Suselibpcaplinux enterprise software development kit 12 sp51.8.1-10.6.1fixed
Suselibpcaplinux enterprise server 12 sp51.8.1-10.6.1fixed
Suselibpcaplinux enterprise server for sap applications 12 sp51.8.1-10.6.1fixed
Suselibpcaplinux enterprise workstation extension 12 sp51.8.1-10.6.1fixed
Suselibpcaplinux enterprise micro 5.31.10.1-150400.3.3.2fixed
Suselibpcaplinux enterprise micro 5.41.10.1-150400.3.3.2fixed
Suselibpcaplinux enterprise micro 5.51.10.1-150400.3.3.2fixed
Suselibpcaplinux enterprise module for basesystem 15 sp51.10.1-150400.3.3.2fixed
Suselibpcaplinux enterprise module for package hub 15 sp51.10.1-150400.3.3.2fixed
Opensuselibpcapleap micro 5.51.10.1-150400.3.3.2fixed
Opensuselibpcapleap 15.51.10.1-150400.3.3.2fixed
Opensuselibpcaptumbleweed1.10.5-1.1fixed
Suselibpcaplinux enterprise module for basesystem 15 sp61.10.4-150600.3.3.2fixed
Suselibpcaplinux enterprise module for package hub 15 sp61.10.4-150600.3.3.2fixed
Opensuselibpcapleap 15.61.10.4-150600.3.3.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibpcapsourcesid1.10.5-1unimportantNot reportedNot reported
Debianlibpcapsourceforky1.10.5-1unimportantNot reportedNot reported
Debianlibpcapsourcetrixie1.10.5-1unimportantNot reportedNot reported
Debianlibpcapsourcebookworm(unfixed)unimportantNot reportedNot reported
Suselibpcaprpmlinux micro 6.11.10.4-slfo.1.1_2.1Not reportedSUSE-SU-2026:20064-1Not reported
Suselibpcaprpmlinux micro 6.01.10.4-3.1Not reportedSUSE-SU-2025:20059-1Not reported
Suselibpcaprpmlinux enterprise micro 5.11.9.1-150300.3.3.1Not reportedSUSE-SU-2024:3516-1Not reported
Suselibpcaprpmlinux enterprise micro 5.21.9.1-150300.3.3.1Not reportedSUSE-SU-2024:3516-1Not reported
Suselibpcaprpmlinux enterprise software development kit 12 sp51.8.1-10.6.1Not reportedSUSE-SU-2024:3355-1Not reported
Suselibpcaprpmlinux enterprise server 12 sp51.8.1-10.6.1Not reportedSUSE-SU-2024:3355-1Not reported
Suselibpcaprpmlinux enterprise server for sap applications 12 sp51.8.1-10.6.1Not reportedSUSE-SU-2024:3355-1Not reported
Suselibpcaprpmlinux enterprise workstation extension 12 sp51.8.1-10.6.1Not reportedSUSE-SU-2024:3355-1Not reported
Suselibpcaprpmlinux enterprise micro 5.31.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Suselibpcaprpmlinux enterprise micro 5.41.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Suselibpcaprpmlinux enterprise micro 5.51.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Suselibpcaprpmlinux enterprise module for basesystem 15 sp51.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Suselibpcaprpmlinux enterprise module for package hub 15 sp51.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Opensuselibpcaprpmleap micro 5.51.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Opensuselibpcaprpmleap 15.51.10.1-150400.3.3.2Not reportedSUSE-SU-2024:3210-1Not reported
Opensuselibpcaprpmtumbleweed1.10.5-1.1Not reportedOPENSUSE-SU-2024:14309-1Not reported
Suselibpcaprpmlinux enterprise module for basesystem 15 sp61.10.4-150600.3.3.2Not reportedSUSE-SU-2024:3217-1Not reported
Suselibpcaprpmlinux enterprise module for package hub 15 sp61.10.4-150600.3.3.2Not reportedSUSE-SU-2024:3217-1Not reported
Opensuselibpcaprpmleap 15.61.10.4-150600.3.3.2Not reportedSUSE-SU-2024:3217-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CISA cybersecurity advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]