CVE-2024-8006

Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions that become available is pcap_findalldevs_ex(). One of the function arguments can be a filesystem path, which normally means a directory with input data files. When the specified path cannot be used as a directory, the function receives NULL from opendir(), but does not check the return value and passes the NULL value to readdir(), which causes a NULL pointer derefence.

• CWE-476
• CWE-476

• https://github.com/the-tcpdump-group/libpcap/commit/0f8a103469ce87d2b8d68c5130a46ddb7fb5eb29Patch
• https://github.com/the-tcpdump-group/libpcap/commit/8a633ee5b9ecd9d38a587ac9b204e2380713b0d6Patch

Published

Aug 31, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-8000On affected platforms running Arista EOS with 802.1X configu…5.3
• CVE-2024-8001A vulnerability was found in VIWIS LMS 9.11. It has been cla…4.3
• CVE-2024-8002A vulnerability has been found in VIWIS LMS 9.11 and classif…6.9
• CVE-2024-8003A vulnerability was found in Go-Tribe gotribe-admin 1.0 and …9.8
• CVE-2024-8004A stored Cross-site Scripting (XSS) vulnerability affecting …5.4
• CVE-2024-8005A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has…9.8
• CVE-2024-8007A flaw was found in the openstack-tripleo-common component o…8.1
• CVE-2024-8008A reflected cross-site scripting (XSS) vulnerability exists …5.2
• CVE-2024-8009The Sensei LMS WordPress plugin before 4.20.0 disclose all …4.3
• CVE-2024-8010The component accepts XML input through the publisher withou…7.5
• CVE-2024-8011Logitech Options+ on MacOS prior 1.72 allows a local attacke…5.5
• CVE-2024-8012An authentication bypass weakness in the message broker serv…7.8