The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22017-1 advisory.

    Changes in pcapplusplus:

    - Update to version 26.07
      * libpcap / WinPcap / Npcap is now optional.
      * Bumped the minimum required C++ standard to C++14

      Protocol support:

      * Added Modbus protocol
      * Added DoIP - Diagnostic over Internet Protocol
      * Added PostgreSQL Wire Protocol (PGWire), including         additional message types
      * Added MySQL Wire Protocol
      * Discrete FTPControl and FTPData protocol types
      * Add support for AccurateECN TCP flag
      * Improve SIP packet detection using heuristic parsing
      * Recognize LLC payload in SLL2

      Added extensive X.509 / cryptography support:

      * X.509 certificate decoding, extension parsing, and parsing         of X.509 certificates embedded in SSL/TLS messages
      * Export/import of X.509 certificates to PEM format, plus a         new general-purpose PEM codec
      * Cryptographic key decoders (RSA/EC private and public keys)
      * Base64 encoding/decoding
      * A new X509Toolkit example application
      * Expanded ASN.1 codec support: BitString,         UTCTime/GeneralizedTime, ObjectIdentifier and string records,         plus arbitrary-size integer support
      * IFileReaderDevice::createReader() and         IFileReaderDevice::tryCreateReader() use file-content         heuristics         to automatically pick the right reader (pcap/pcapng/snoop)         instead of relying solely on the file extension
      * Add incremental packet parsing support with         Packet::parsePacket()
      * Added multi-language README support: Japanese
      * IPv4Address/IPv6Address/MacAddress user-defined literals,         e.g. constructing addresses directly from string literals,         and sized buffer-construction overloads
      * Explicit-ownership overloads for RawPacket::setRawData(),         and a sized overload for Layer::copyData()
      * Improved zstd support: added a build flag to control zstd         support
      * A new SuppressLogs RAII class for temporarily suppressing         log output
      * Large-scale internal refactoring of the device layer         (PcapLiveDevice, DpdkDeviceList, file readers/writers,         statistics tracking), the logging infrastructure, and the         packet parsing infrastructure, improving encapsulation,         thread-safety, and maintainability
      * Improved benchmarking: added a pure-parsing benchmark and         extended benchmarks to support PcapNG and Snoop files
      * Test refactoring: replace packet creation macros in with C++         functions
      * Tons of security and correctness bug fixes

      Breaking changes:

      * The minimum required C++ standard has been raised to C++14
      * IPcapDevice has been removed; its logic now lives in         PcapLiveDevice
      * libpcap/WinPcap/Npcap is now an optional dependency -         building without it disables Pcap++ capture features, though         Common++/Packet++ (including pcap file I/O) remain fully         usable
      * Various internal APIs around device lists and statistics         tracking were reworked as part of the refactoring above; this         may affect code relying on undocumented internals

      Deprecation list:

      * IPv6Address::copyTo() has been deprecated, please use         IPv6Address::copyToNewBuffer() instead
      * MacAddress::copyTo() has been deprecated, please use         MacAddress::copyToNewBuffer() instead
      * Asn1IntegerRecord::getValue() has been deprecated, please         use Asn1IntegerRecord::getIntValue() instead
      * RawPacket::getObjectType() has been deprecated due to         unclear semantics
      * RawPacket::setRawData() has been deprecated, please use the         overload that takes takeOwnership parameter for explicit         control
      * RawPacket::initWithRawData() has been deprecated, please use         RawPacket::setRawData() with takeOwnership=false instead
      * SSLExtension::SSLExtension() has been deprecated, please use         the constructor with bounded span instead
      * Several TcpOptionBuilder constructors have been deprecated,         please use the new constructors with TcpOptionEnumType         instead
      * TcpLayer::getTcpOption(TcpOptionType option) has been         deprecated, please use the overload         TcpLayer::getTcpOption(TcpOptionEnumType option) instead
      * TcpLayer::removeTcpOption(TcpOptionType optionType) has been         deprecated, please use the overload         TcpLayer::removeTcpOption(TcpOptionEnumType optionType)         instead
      * MBufRawPacket::getObjectType() has been deprecated due to         unclear semantics
      * IFileReaderDevice::getReader() has been deprecated, please         use IFileReaderDevice::tryCreateReader() instead
      * PcapFileReaderDevice::isNanoSecondPrecisionSupported() has         been deprecated, nanosecond precision is now natively         supported         by the internal parser and always returns true
      * PcapFileWriterDevice::isNanoSecondPrecisionSupported() has         been deprecated, nanosecond precision is now natively         supported         by the internal parser and always returns true
      * BpfFilterWrapper::matchPacketWithFilter() has been         deprecated, please use BpfFilterWrapper::matches() instead
      * GeneralFilter::matchPacketWithFilter() has been deprecated,         please use GeneralFilter::matches() instead
      * PcapLiveDevice::matchPacketWithFilter() has been deprecated,         please use GeneralFilter::matches() directly
      * PcapLiveDevice::sendPacket(Packet* packet, bool checkMtu =         true) has been deprecated, please use         PcapLiveDevice::sendPacket(Packet const& packet, bool         checkMtu) instead
      * PcapRemoteDeviceList::getRemoteDeviceByIP() has been         deprecated, please use PcapRemoteDeviceList::getDeviceByIP()         instead
      * PfRingDeviceList::getPfRingDeviceByName() has been         deprecated, please use PfRingDeviceList::getDeviceByName()         instead

    - CVE-2026-13587: heap-based buffer overflow via function `parse_by_block_type` (boo#1269621)
    - CVE-2026-13588: heap-based buffer overflow via function     `pcpp::SSLClientHelloMessage::getHandshakeVersion` (boo#1269620)
    - CVE-2026-13589: heap-based buffer overflow via function `pcpp::TelnetLayer::getSubCommand` (boo#1269619)
    - CVE-2026-13590: heap-based buffer overflow via function `pcpp::ModbusLayer::getLength` (boo#1269618)

    - Update to version 25.05

      New protocol support:

      * WireGuard
      * Add gratuitous ARP requests
      * GTPv2
      * Cisco HDLC

      New features:

      * Added the option to build only Common++ and Packet++         libraries without Pcap++, removing the dependency on third-party         libraries like libpcap or WinPcap/Npcap
      * Updated the CMake files to support using pcapplusplus/ as         the include prefix
      * Added support for DPDK 23.11 and 24.11
      * Introduced nanosecond precision for timestamps in TCP         reassembly
      * Added support for timestamp-related libpcap options
      * Added multi-language README support
      * Introduced a new benchmark system using Google Benchmark
      * Enhanced Python testing and linting infrastructure with ruff

      Code refactoring:

      * Overhauled the logging infrastructure for better performance         and flexibility
      * Reformatted CMakeLists files using gersemi
      * Updated the internal implementation of PcapLiveDevice to         store IP information as IPAddress
      * Streamlined packet parsing using templated next-layer         sub-construction
      * Refactored device list classes
      * Improved the internal implementation of MacAddress,         IPAddress and IPNetwork classes
      * Enhanced and modernized the internal implementation of         PfRingDevice
      * Removed usage of VLAs
      * Numerous C++11 modernization efforts
      * Improved documentation using triple-slash Doxygen formatting

      Other:

      * Tons of bug fixes, security fixes and small improvements

      Breaking changes:

      * Logger::LogLevel has been deprecated and moved to LogLevel.
        LogLevel is now an enum class, so arithmetic operations on it         will fail to compile
      * The Logger copy constructor and copy assignment operator are         marked as deleted
      * The return type of Packet::getRawPacketReadOnly() has been         changed from RawPacket* to RawPacket const*
      * SSLv2 support has been removed

      Deprecation list:

      * PcapLiveDevice::getAddresses(), which was previously         deprecated, has now been removed
      * libpcap versions < 0.9 are no longer supported. As a result,         the following CMake options have been removed:
        PCAPPP_ENABLE_PCAP_IMMEDIATE_MODE and         PCAPPP_ENABLE_PCAP_SET_DIRECTION
      * The following methods are now deprecated and will be removed         in future versions:
      * Logger::Error, Logger::Info, and Logger::Debug are         deprecated. Please use LogLevel::XXX instead
      * PcapLiveDeviceList::getPcapLiveDeviceBy*** methods have been         deprecated in favor of PcapLiveDeviceList::getDeviceBy***
      * ArpLayer(ArpOpcode opCode, const MacAddress &senderMacAddr,         const MacAddress &targetMacAddr, const IPv4Address         &senderIpAddr, const IPv4Address &targetIpAddr) constructor has         been deprecated in favor of more explicit overloads

    - version 24.09

      New features:

      * Added support for eBPF AF_XDP

      New protocols:

      * SMTP
      * ASN.1 encoding and decoding
      * Enabled ASN.1 root record parsing in x509 certificates
      * LDAP
      * S7COMM

      DPDK improvements:

      * DPDK 22.11 support
      * Jumbo frames support
      * Added an option to disable hugepages and driver verification         on initialization
      * NUMA awareness

      Examples and utils:

      * Added XdpExample-FilterTraffic to demonstrate XdpDevice usage
      * PcapSplitter: updated output filenames with 5-tuple         information
      * Added support for nanosecond precision in reading and         writing pcap files
      * Blocking mode packet capture now uses poll()
      * Added millisecond precision timeout in RawSocketDevice
      * Extended IPFilter to support IPv6 where possible
      * Boosted build time with Ccache
      * Fixed precision issue in pcapng file reader
      * Improved method for retrieving the default gateway on macOS
      * Added security and code of conduct guidelines
      * Refactoring and modernization of the code base:
      * Refactored and cleaned up live devices
        - Added a getter for fetching all IP addresses as IPAddress         objects.
      * Refactored IP address classes IPv4Address, IPv6Address,         IPAddress
        - Added equality operators between IPAddress and in_addr           types
      * Refactored the MAC address class MacAddress
      * Ported PcapPlusPlus libraries to C++11
      * Ported most of the examples and tutorials to C++11
      * Refactored and cleaned up PF_RING devices
      * Refactored and cleaned up the PointerVector class
      * Converted Macro Guard to pragma once
      * Replaced std::map with std::unordered_map
      * Refactored large parts of the packet filtering code

      Internal tools:

      * Reformatted the entire code base using clang-format
      * Added dependabot to keep GitHub Actions and Python packages         up-to-date
      * Added OpenSSF Scorecard automation to monitor and enhance         security
      * Transitioned from CirrusCI to GitHub Actions for all         workflows
      * Scheduled regular CI builds
      * Replaced deprecated netifaces by scapy
      * Improved fuzzing coverage and added Fuzz CI
      * Added a template for opening GitHub issues
      * Upgraded LightPcapNg to the latest from master
      * Fixed unhandled exceptions crashing the entire test suite

      Other:

      * Tons of bug fixes, security fixes and small improvements

      Breaking changes:

      * Removed isValid() from MacAddress, IPAddress, IPv4Address,         IPv6Address, instead they throw an exception if the input         argument is invalid
      * Introduced a new TcpOptionEnumType
      * Removed the dummy argument in PayloadLayer's constructor

      Removed methods:

      * IPv4Address::matchSubnet()

      Methods now marked as deprecated:

      * PointerVector::getAndRemoveFromVector() -> replaced by         PointerVector::getAndDetach()
      * HttpResponseLayer::HttpResponseLayer(version, statusCode,         statusCodeString) -> use other constructors
      * HttpResponseLayer::setStatusCode(newStatusCode,         statusCodeString) -> use the other overload
      * TcpOptionType enum -> replaced by TcpOptionEnumType
      * TcpOption::getTcpOptionType() -> replaced by         TcpOption::getTcpOptionEnumType()
      * TcpOptionBuilder::TcpOptionBuilder() -> use other         constructors
      * TcpLayer::getTcpOption(TcpOptionType option) -> use the         other overload
      * TcpLayer::addTcpOptionAfter() -> replaced by         TcpLayer::insertTcpOptionAfter()
      * TcpLayer::removeTcpOption() -> use the other overload
      * PcapLiveDevice::getAddresses() -> replaced by         PcapLiveDevice::getIPAddresses()
      * PcapRemoteDeviceList::getRemoteDeviceList() -> replaced by         PcapRemoteDeviceList::createRemoteDeviceList()

    - version 23.09

      New features:

      * PcapPlusPlus moved from a custom build system to CMake!
      * Added IP/IPv4/IPv6 network classes to better support netmask         and subnets
      * Add support for opening NFLOG live device
      * MAC address OUI Lookup
      * Intel oneAPI compiler support

      DPDK improvements:

      * Properly support no RSS mode in DpdkDevice
      * Make DPDK app name configurable
      * More generic search of DPDK KNI kernel module in         setup_dpdk.py

      New protocols:

      * NFLOG
      * SLL2
      * TPKT
      * COTP
      * VRRP

      Existing protocols improvements:

      * HTTP - refactor and improve HttpResponseStatusCode
      * SSL/TLS - better detection of possible encrypted handshake         messages
      * DNS - support parsing of resources with larger data
      * STP - add editing/crafting support
      * ARP - add isRequest and isReply methods
      * FTP-DATA support
      * NTP - support Kiss of Death
      * SIP - refactor status codes + add a few missing ones

      New features:

      * Modernize the codebase to use nullptr instead of NULL
      * Remove usage of unsupported pcap_compile_nopcap()

      Internal tools:

      * Codecov integration for coverage reports
      * Enable Clang-Tidy
      * Enable cppcheck
      * Improve the test framework
      * Increase test coverage

      Remove deprecated methods (due to typos):

      * DhcpLayer::getMesageType() -> replaced by         DhcpLayer::getMessageType()
      * DhcpLayer::setMesageType() -> replaced by         DhcpLayer::setMesasgeType()
      * SSLHandshakeMessage::createHandhakeMessage() -> replaced by         SSLHandshakeMessage::createHandshakeMessage()
      * SSLClientHelloMessage::getExtensionsLenth() -> replaced by         SSLClientHelloMessage::getExtensionsLength()
      * SSLServerHelloMessage::getExtensionsLenth() -> replaced by         SSLServerHelloMessage::getExtensionsLength()

      Other:

      * Tons of bug fixes, security fixes, major and minor         improvements

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

openSUSE 16 Security Update : pcapplusplus (openSUSE-SU-2026:22017-1)

medium Nessus Plugin ID 362895

Version 1.2

Version 1.1

Version 1.2 Oct 5, 2026, 7:23 AM CVSS metrics ("Cvssv4 threat score" set to 2.9) CVSS metrics ("Cvssv4 threat vector" set to "CVSS:4.0/E:P") Plugin Feed: 202610050723
Version 1.1 Oct 4, 2026, 10:45 AM New Plugin Feed: 202610041045