Double Free in Tcpdump Libpcap
CVE-2023-7256
In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.
Vulnerability class: Double Free
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.
EPSS exploit prediction
EPSS: 0.002 (13.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 14th percentile — 13.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Tcpdump Libpcap
- The Tcpdump Group Libpcap — versions 1.8.x, 1.9.x, 1.10.x
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2023-7256?
- CVE-2023-7256 is a medium-severity vulnerability in Tcpdump Libpcap, classified under Double Free. CVSS score: 4.4/10. Published 2024-08-31.
- How severe is CVE-2023-7256?
- Medium severity. CVSS v3 base score is 4.4 out of 10.