CVE-2025-11961
OOBR and OOBW in pcap_ether_aton() in libpcap
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
OOBR and OOBW in pcap_ether_aton() in libpcap
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-126, CWE-122
- Updated
- 2026-11-02
EUVDEUVD-2025-205869
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
EUVD-2025-205869- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x25x-vjrm-h7qq
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a...
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
GHSA-x25x-vjrm-h7qq- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-122
- Updated
- 2026-11-02
NVD
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-122, CWE-126
- Updated
- 2026-11-02
OSVALPINE-CVE-2025-11961
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
ALPINE-CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVBELL-CVE-2025-11961
- Record
BELL-CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
Show 26 moreShow less
OSV
OOBR and OOBW in pcap_ether_aton() in libpcap
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Weakness
- CWE-122, CWE-126
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-11961
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
DEBIAN-CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1109
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1109- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1110
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1110- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1111
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1111- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1112
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1112- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1113
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1113- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1114
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1114- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVOESA-2026-1207
libpcap security update
This is the official web site of tcpdump, a powerful command-line packet analyzer; and libpcap, a portable C/C++ library for network traffic capture.
Security Fix(es):
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.(CVE-2025-11961)
- Record
OESA-2026-1207- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-11961
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
UBUNTU-CVE-2025-11961- CVSS 3.1
- 1.9 Low
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N - Updated
- 2026-11-02
OSVAZL-73335 No score
CVE-2025-11961 affecting package libpcap for versions less than 1.10.6-1
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
AZL-73335- Updated
- 2026-11-02
OSVAZL-73344 No score
CVE-2025-11961 affecting package nmap for versions less than 7.95-3
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
AZL-73344- Updated
- 2026-11-05
OSVAZL-73373 No score
CVE-2025-11961 affecting package libpcap for versions less than 1.10.1-5
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
AZL-73373- Updated
- 2026-11-02
OSVAZL-73379 No score
CVE-2025-11961 affecting package nmap for versions less than 7.93-4
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
- Record
AZL-73379- Updated
- 2026-11-02
OSVMGASA-2026-0005 No score
Updated libpcap packages fix security vulnerability
OOBR and OOBW in pcap_ether_aton() in libpcap. (CVE-2025-11961)
- Record
MGASA-2026-0005- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:10032-1 No score
libpcap-devel-1.10.6-1.1 on GA media
These are all security issues fixed in the libpcap-devel-1.10.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:10032-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:20075-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
openSUSE-SU-2026:20075-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0036-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:0036-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0053-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:0053-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0062-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:0062-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0063-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:0063-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:0575-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:0575-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20048-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:20048-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20064-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765). - CVE-2024-8006: missing return value check in
pcap_findalldevs_ex()can lead to NULL pointer dereference (bsc#1230034). - CVE-2023-7256: unclear value returned by
sock_initaddress()can lead to a double-free (bsc#1230020).
- Record
SUSE-SU-2026:20064-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20120-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:20120-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:20153-1 No score
Security update for libpcap
This update for libpcap fixes the following issues:
- CVE-2025-11961: missing validation of provided MAC-48 address string in
pcap_ether_aton()can lead to out-of-bounds read and write (bsc#1255765).
- Record
SUSE-SU-2026:20153-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libpcapAlpine:v3.21 |
before 1.10.7-r0 | 1.10.7-r0 |
libpcapAlpine:v3.22 |
before 1.10.7-r0 | 1.10.7-r0 |
libpcapAlpine:v3.23 |
before 1.10.7-r0 | 1.10.7-r0 |
libpcapAlpine:v3.24 |
before 1.10.6-r0 | 1.10.6-r0 |
libpcapAzure Linux:3 |
before 1.10.6-1 | 1.10.6-1 |
nmapAzure Linux:3 |
before 7.95-3 | 7.95-3 |
libpcapAzure Linux:2 |
before 1.10.1-5 | 1.10.1-5 |
nmapAzure Linux:2 |
before 7.93-4 | 7.93-4 |
libpcapAlpaquita:23 |
1.10.1-r0 up to 1.10.7-r0 | 1.10.7-r0 |
libpcapAlpaquita:25 |
1.10.5-r0 up to 1.10.7-r0 | 1.10.7-r0 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libpcapAlpaquita:stream |
1.10.1-r0 up to 1.10.6-r0 | 1.10.6-r0 |
libpcapDebian:12 |
All versions, plus listed versions 1.10.3-11.10.4-11.10.4-21.10.4-31.10.4-4 Show 8 moreShow less1.10.4-4.11.10.4-4.1~exp11.10.4-51.10.4-5+hurd.11.10.5-11.10.5-21.10.6-11.10.6-2 |
None known |
libpcapDebian:13 |
All versions, plus listed versions 1.10.5-21.10.6-11.10.6-2 |
None known |
libpcapDebian:14 |
before 1.10.6-1, plus listed versions 1.10.5-2 |
1.10.6-1 |
libpcapMageia:9 |
before 1.10.6-1.mga9 | 1.10.6-1.mga9 |
libpcapopenEuler:24.03-LTS |
before 1.10.4-5.oe2403 | 1.10.4-5.oe2403 |
libpcapopenEuler:24.03-LTS-SP1 |
before 1.10.4-5.oe2403sp1 | 1.10.4-5.oe2403sp1 |
libpcapopenEuler:24.03-LTS-SP2 |
before 1.10.4-5.oe2403sp2 | 1.10.4-5.oe2403sp2 |
libpcapopenEuler:24.03-LTS-SP3 |
before 1.10.4-5.oe2403sp3 | 1.10.4-5.oe2403sp3 |
libpcapopenEuler:22.03-LTS-SP3 |
before 1.10.3-4.oe2203sp3 | 1.10.3-4.oe2203sp3 |
libpcapopenEuler:22.03-LTS-SP4 |
before 1.10.3-4.oe2203sp4 | 1.10.3-4.oe2203sp4 |
libpcapopenEuler:20.03-LTS-SP4 |
before 1.9.1-8.oe2003sp4 | 1.9.1-8.oe2003sp4 |
libpcapopenSUSE:Leap 15.6 |
before 1.10.4-150600.3.9.1 | 1.10.4-150600.3.9.1 |
libpcapSUSE:Linux Enterprise Micro 5.2 |
before 1.9.1-150300.3.6.1 | 1.9.1-150300.3.6.1 |
libpcapSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 |
before 1.8.1-10.9.1 | 1.8.1-10.9.1 |
libpcapSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 1.10.5-150700.3.7.1 | 1.10.5-150700.3.7.1 |
libpcapSUSE:Linux Enterprise Module for Package Hub 15 SP7 |
before 1.10.5-150700.3.7.1 | 1.10.5-150700.3.7.1 |
libpcapSUSE:Linux Enterprise Micro 5.3 |
before 1.10.1-150400.3.9.1 | 1.10.1-150400.3.9.1 |
libpcapSUSE:Linux Enterprise Micro 5.4 |
before 1.10.1-150400.3.9.1 | 1.10.1-150400.3.9.1 |
libpcapSUSE:Linux Enterprise Micro 5.5 |
before 1.10.1-150400.3.9.1 | 1.10.1-150400.3.9.1 |
libpcapSUSE:Linux Micro 6.0 |
before 1.10.4-4.1 | 1.10.4-4.1 |
libpcapSUSE:Linux Micro 6.1 From an advisory covering 3 CVEs |
before 1.10.4-slfo.1.1_2.1 | 1.10.4-slfo.1.1_2.1 |
libpcapSUSE:Linux Enterprise Server 16.0 |
before 1.10.5-160000.4.1 | 1.10.5-160000.4.1 |
libpcapSUSE:Linux Enterprise Server for SAP applications 16.0 |
before 1.10.5-160000.4.1 | 1.10.5-160000.4.1 |
libpcapSUSE:Linux Micro 6.2 |
before 1.10.5-160000.4.1 | 1.10.5-160000.4.1 |
libpcapUbuntu:Pro:14.04:LTS |
All versions, plus listed versions 1.4.0-21.5.1-11.5.2-11.5.3-11.5.3-21.5.3-2ubuntu0.11.5.3-2ubuntu0.1+esm1 |
None known |
libpcapUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.7.4-11.7.4-21.7.4-2ubuntu0.11.7.4-2ubuntu0.1+esm1 |
None known |
libpcapUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.8.1-5ubuntu11.8.1-6ubuntu11.8.1-6ubuntu1.18.04.11.8.1-6ubuntu1.18.04.21.8.1-6ubuntu1.18.04.2+esm1 |
None known |
libpcapUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.9.1-21.9.1-31.9.1-3ubuntu1.20.04.11.9.1-3ubuntu1.20.04.1+esm1 |
None known |
libpcapUbuntu:22.04:LTS |
All versions, plus listed versions 1.10.0-2build11.10.1-41.10.1-4build11.10.1-4ubuntu1.22.04.11.10.1-4ubuntu1.22.04.2 |
None known |
libpcapUbuntu:24.04:LTS |
All versions, plus listed versions 1.10.4-41.10.4-4ubuntu31.10.4-4.1ubuntu21.10.4-4.1ubuntu31.10.4-4.1ubuntu3.1 |
None known |
libpcapUbuntu:25.10 |
All versions, plus listed versions 1.10.5-2ubuntu11.10.5-2ubuntu2 |
None known |
libpcapUbuntu:26.04:LTS |
All versions, plus listed versions 1.10.5-2ubuntu21.10.5-2ubuntu31.10.6-1ubuntu11.10.6-1ubuntu1.1 |
None known |
libpcapopenSUSE:Tumbleweed |
before 1.10.6-1.1 | 1.10.6-1.1 |
libpcapopenSUSE:Leap 16.0 |
before 1.10.5-160000.4.1 | 1.10.5-160000.4.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-11961 is a low vulnerability (CVSS 1.9) in The Tcpdump Group Libpcap, published December 31, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.12%, the 1st percentile. Fixed in libpcap 1.10.7-r0.
References
github.com/the-tcpdump-group/libpcap/commit/b2d2f9a9a0581c40780bde509f7cc715920f1c02
nvd.nist.gov/vuln/detail/CVE-2025-11961
security.alpinelinux.org/vuln/CVE-2025-11961
docs.bell-sw.com/security/cves/CVE-2025-11961
Show 29 moreShow less
security-tracker.debian.org/tracker/CVE-2025-11961
advisories.mageia.org/MGASA-2026-0005.html
bugs.mageia.org/show_bug.cgi?id=34939
slackware.com/security/viewer.php?l=slackware-security&y=2026&m=slackware-security.355202
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1109
suse.com/support/update/announcement/2026/suse-su-20260036-1
bugzilla.suse.com/1255765
ubuntu.com/security/CVE-2025-11961
cve.org/CVERecord?id=CVE-2025-11961