UnratedFix available

libpcap vulnerability

Type: advisorySource: OSV1 source record

It was discovered that libpcap did not properly validate BPF instructions in some situation. An attacker could possibly use this issue to perform out of bound memory operations.

Announced 25 Sept 2026Group revision 1

Original source ↗

USN-8824-1

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:USN-8824-1

libpcap

Source reference: /affected/0/package/name

Affected versions: 1.4.0-2
Source reference: /affected/0/versions
1.5.1-1
Source reference: /affected/0/versions
1.5.2-1
Source reference: /affected/0/versions
1.5.3-1
Source reference: /affected/0/versions
1.5.3-2
Source reference: /affected/0/versions
1.5.3-2ubuntu0.1
Source reference: /affected/0/versions
Fixed versions: 1.5.3-2ubuntu0.1+esm1
Source reference: /affected/0/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/1/package/name

Affected versions: 1.7.4-1
Source reference: /affected/1/versions
1.7.4-2
Source reference: /affected/1/versions
1.7.4-2ubuntu0.1
Source reference: /affected/1/versions
Fixed versions: 1.7.4-2ubuntu0.1+esm1
Source reference: /affected/1/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/2/package/name

Affected versions: 1.8.1-5ubuntu1
Source reference: /affected/2/versions
1.8.1-6ubuntu1
Source reference: /affected/2/versions
1.8.1-6ubuntu1.18.04.1
Source reference: /affected/2/versions
1.8.1-6ubuntu1.18.04.2
Source reference: /affected/2/versions
Fixed versions: 1.8.1-6ubuntu1.18.04.2+esm1
Source reference: /affected/2/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/3/package/name

Affected versions: 1.9.1-2
Source reference: /affected/3/versions
1.9.1-3
Source reference: /affected/3/versions
1.9.1-3ubuntu1.20.04.1
Source reference: /affected/3/versions
Fixed versions: 1.9.1-3ubuntu1.20.04.1+esm1
Source reference: /affected/3/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/4/package/name

Affected versions: 1.10.0-2build1
Source reference: /affected/4/versions
1.10.1-4
Source reference: /affected/4/versions
1.10.1-4build1
Source reference: /affected/4/versions
1.10.1-4ubuntu1.22.04.1
Source reference: /affected/4/versions
Fixed versions: 1.10.1-4ubuntu1.22.04.2
Source reference: /affected/4/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/5/package/name

Affected versions: 1.10.4-4
Source reference: /affected/5/versions
1.10.4-4ubuntu3
Source reference: /affected/5/versions
1.10.4-4.1ubuntu2
Source reference: /affected/5/versions
1.10.4-4.1ubuntu3
Source reference: /affected/5/versions
Fixed versions: 1.10.4-4.1ubuntu3.1
Source reference: /affected/5/ranges
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/6/package/name

Affected versions: 1.10.5-2ubuntu2
Source reference: /affected/6/versions
1.10.5-2ubuntu3
Source reference: /affected/6/versions
1.10.6-1ubuntu1
Source reference: /affected/6/versions
Fixed versions: 1.10.6-1ubuntu1.1
Source reference: /affected/6/ranges
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.5.3-2ubuntu0.1+esm1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra-legacy%2Ftrusty",
      "ecosystem": "Ubuntu:Pro:14.04:LTS"
    },
    "versions": [
      "1.4.0-2",
      "1.5.1-1",
      "1.5.2-1",
      "1.5.3-1",
      "1.5.3-2",
      "1.5.3-2ubuntu0.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:Pro:14.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.5.3-2ubuntu0.1+esm1"
        }
      ],
      "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.7.4-2ubuntu0.1+esm1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra-legacy%2Fxenial",
      "ecosystem": "Ubuntu:Pro:16.04:LTS"
    },
    "versions": [
      "1.7.4-1",
      "1.7.4-2",
      "1.7.4-2ubuntu0.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:Pro:16.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.7.4-2ubuntu0.1+esm1"
        }
      ],
      "availability": "Available with Ubuntu Pro with Legacy support add-on: https://ubuntu.com/pro"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.8.1-6ubuntu1.18.04.2+esm1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra%2Fbionic",
      "ecosystem": "Ubuntu:Pro:18.04:LTS"
    },
    "versions": [
      "1.8.1-5ubuntu1",
      "1.8.1-6ubuntu1",
      "1.8.1-6ubuntu1.18.04.1",
      "1.8.1-6ubuntu1.18.04.2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:Pro:18.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.8.1-6ubuntu1.18.04.2+esm1"
        }
      ],
      "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.9.1-3ubuntu1.20.04.1+esm1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra%2Ffocal",
      "ecosystem": "Ubuntu:Pro:20.04:LTS"
    },
    "versions": [
      "1.9.1-2",
      "1.9.1-3",
      "1.9.1-3ubuntu1.20.04.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:Pro:20.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.9.1-3ubuntu1.20.04.1+esm1"
        }
      ],
      "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.10.1-4ubuntu1.22.04.2"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=jammy",
      "ecosystem": "Ubuntu:22.04:LTS"
    },
    "versions": [
      "1.10.0-2build1",
      "1.10.1-4",
      "1.10.1-4build1",
      "1.10.1-4ubuntu1.22.04.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:22.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.10.1-4ubuntu1.22.04.2"
        }
      ],
      "availability": "No subscription required"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.10.4-4.1ubuntu3.1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=noble",
      "ecosystem": "Ubuntu:24.04:LTS"
    },
    "versions": [
      "1.10.4-4",
      "1.10.4-4ubuntu3",
      "1.10.4-4.1ubuntu2",
      "1.10.4-4.1ubuntu3"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:24.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8t64",
          "binary_version": "1.10.4-4.1ubuntu3.1"
        }
      ],
      "availability": "No subscription required"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "1.10.6-1ubuntu1.1"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=resolute",
      "ecosystem": "Ubuntu:26.04:LTS"
    },
    "versions": [
      "1.10.5-2ubuntu2",
      "1.10.5-2ubuntu3",
      "1.10.6-1ubuntu1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8824-1.json",
      "cves_map": {
        "cves": [
          {
            "id": "CVE-2026-0799",
            "severity": [
              {
                "type": "CVSS_V3",
                "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H"
              },
              {
                "type": "Ubuntu",
                "score": "medium"
              }
            ]
          }
        ],
        "ecosystem": "Ubuntu:26.04:LTS"
      }
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8t64",
          "binary_version": "1.10.6-1ubuntu1.1"
        }
      ],
      "availability": "No subscription required"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #17550 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:35:10 GMT
Publisher date: Fri, 25 Sep 2026 08:50:02 GMT

Read the original announcement

Revision history

25 Oct 2026USN-8824-1 · Revision 1Source updated