Is CVE-2026-18313 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-18313?

CVE-2026-18313 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-18313

Description

rpcapd can allocate up to 65536 bytes per each RPCAP_MSG_UPDATEFILTER_REQ or RPCAP_MSG_STARTCAP_REQ message received from the client, but it never frees the memory, so it leaks memory even under normal use. A malicious client can cause the server to leak memory substantially faster.