CVE-2023-7256

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

In affected libpcap versions during the setup of a remote packet capture the internal function sock_initaddress() calls getaddrinfo() and possibly freeaddrinfo(), but does not clearly indicate to the caller function whether freeaddrinfo() still remains to be called after the function returns. This makes it possible in some scenarios that both the function and its caller call freeaddrinfo() for the same allocated memory block. A similar problem was reported in Apple libpcap, to which Apple assigned CVE-2023-40400.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published
Aug 31, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-72586.5A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making itCVE-2023-72592.4** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This affects an unknown CVE-2023-72607.5Path Traversal vulnerability discovered in OpenText™ CX-E Voice, affecting all version through 22.4. The vulnerability could allow arbitraCVE-2023-72617.8Inappropriate implementation in Google Updator prior to 1.3.36.351 in Google Chrome allowed a local attacker to perform privilege escalationCVE-2023-72637.3Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorCVE-2023-72649.8The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, anCVE-2023-72656.2Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availabilitCVE-2023-72668.1Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or informatiCVE-2023-72686.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticCVE-2023-72697.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escapingCVE-2023-72705.3An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 20CVE-2023-72715.5Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.
CVE-2023-7256: Medium severity, CVSS 4.4 | Vulnix