Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.

The version of libpcap / nmap installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8006 advisory.

  - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote     packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One     of the function arguments can be a filesystem path, which normally means a directory with input data     files. When the specified path cannot be used as a directory, the function receives NULL from opendir(),     but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer     derefence. (CVE-2024-8006)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLED_SAP12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3355-1 advisory.

    - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)
    - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3217-1 advisory.

    - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)
    - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3210-1 advisory.

    - CVE-2024-8006: NULL pointer dereference in function pcap_findalldevs_ex(). (bsc#1230034)
    - CVE-2023-7256: double free via struct addrinfo in function sock_initaddress(). (bsc#1230020)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libpcap installed on the remote host is prior to 1.10.5. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2024-244-01 advisory.

    New libpcap packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
210130	CBL Mariner 2.0 Security Update: libpcap / nmap (CVE-2024-8006)	Nessus	MarinerOS Local Security Checks	medium
207574	SUSE SLED12 / SLES12 Security Update : libpcap (SUSE-SU-2024:3355-1)	Nessus	SuSE Local Security Checks	medium
207224	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libpcap (SUSE-SU-2024:3217-1)	Nessus	SuSE Local Security Checks	medium
207047	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : libpcap (SUSE-SU-2024:3210-1)	Nessus	SuSE Local Security Checks	medium
206412	Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2024-244-01)	Nessus	Slackware Local Security Checks	medium

Detections

Analytics

CVE-2024-8006

medium

Tenable Plugins

medium

medium

medium

medium

medium