JLSEC-2026-764

Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-764.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-764.json
JSON Data
https://api.test.osv.dev/v1/vulns/JLSEC-2026-764
Upstream
  • EUVD-2023-59437
  • GHSA-7m22-9mw3-j4pp
Published
2026-07-15T15:14:16Z
Modified
2026-07-25T18:25:31Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
In affected libpcap versions during the setup of a remote packet capture the internal function...
Details

In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.

Database specific
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "database_specific": {
                "status": "Analyzed"
            },
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7256",
            "id": "CVE-2023-7256",
            "imported": "2026-07-17T22:38:14.356Z",
            "modified": "2026-06-17T06:52:25.317Z",
            "published": "2024-08-31T00:15:05.240Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2023-7256"
        },
        {
            "html_url": "https://github.com/advisories/GHSA-7m22-9mw3-j4pp",
            "id": "GHSA-7m22-9mw3-j4pp",
            "imported": "2026-07-17T22:38:14.579Z",
            "modified": "2024-08-31T00:31:11Z",
            "published": "2024-08-31T00:31:05Z",
            "url": "https://api.github.com/advisories/GHSA-7m22-9mw3-j4pp"
        },
        {
            "html_url": "https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59437",
            "id": "EUVD-2023-59437",
            "imported": "2026-07-17T22:38:14.955Z",
            "modified": "2024-09-03T20:07:34Z",
            "published": "2024-08-30T23:44:04Z",
            "url": "https://euvdservices.enisa.europa.eu/api/enisaid?id=EUVD-2023-59437"
        }
    ]
}
References

Affected packages

Julia / libpcap_jll

Package

Name
libpcap_jll
Purl
pkg:julia/libpcap_jll?uuid=f78539f5-9ba6-5ded-ae79-6d41194c59b7

Affected ranges

Type
SEMVER
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.5+0

Database specific

source
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-764.json"