The vulnerability allows a crafted BPF filter program or a packet that uses the 'protochain' primitive to trigger the libpcap BPF interpreter to loop infinitely. The interpreter treats the offset in the 'ja L' instruction as a signed integer to implement looping via backward jumps, but it does not limit the number of loop iterations. This can freeze or exhaust CPU resources for any process that uses libpcap, such as tcpdump or Wireshark, without compromising confidentiality or integrity.

The vulnerability affects libpcap versions released by The Tcpdump Group before 1.10.7. Any distribution or custom build of libpcap that has not yet been upgraded to 1.10.7 is susceptible.

The CVSS score of 7.5 indicates a high severity. The EPSS score is <1%, suggesting a low probability of exploitation under current conditions. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector requires an attacker who can supply a crafted BPF filter program or a crafted packet employing the 'protochain' primitive to a libpcap consumer; this could be local or remote, depending on how the filter is provided. Exploitation would lead to process starvation or repeated CPU usage but does not allow direct code execution or data exfiltration.