PT-2025-54265 · Libpcap+1 · Libpcap+1

Jin Wei + 2 · Published 2025-01-01 · Updated 2026-02-18 · CVE-2025-11961

Positive Technologies (AI Summary)

CVSS v3.1

1.9

Low

Base vector

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions libpcap (affected versions not specified)

Description The pcap ether aton() function in libpcap has a flaw where it can read and write data beyond allocated buffer boundaries when provided with a malformed MAC-48 address string. The function expects a well-formed MAC-48 address but lacks adequate documentation regarding the expected format. If an application calls the function with an improperly formatted string, it can lead to a buffer overflow. The vulnerable function is pcap ether aton().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Over-read

Heap Based Buffer Overflow

Weakness Enumeration

CWE-126

CWE-122

Related Identifiers

AZL-73335

AZL-73344

AZL-73373

AZL-73379

CVE-2025-11961

ECHO-5E37-6BB1-4B05

MGASA-2026-0005

OESA-2026-1109

OESA-2026-1110

OESA-2026-1111

OESA-2026-1112

OESA-2026-1113

OESA-2026-1114

OESA-2026-1207

OPENSUSE-SU-2026:10032-1

OPENSUSE-SU-2026:20075-1

SUSE-SU-2026:0036-1

SUSE-SU-2026:0053-1

SUSE-SU-2026:0062-1

SUSE-SU-2026:0063-1

SUSE-SU-2026:0575-1

SUSE-SU-2026:20048-1

SUSE-SU-2026:20064-1

SUSE-SU-2026:20120-1

SUSE-SU-2026:20153-1

Affected Products

Debian

Libpcap

References · 62

• https://github.com/the-tcpdump-group/libpcap/commit/b2d2f9a9a0581c40780bde509f7cc715920f1c02 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2026:0062-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11961 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20120-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1111 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1207 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-73335 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-73373 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-73344 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20153-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2026-0005 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1112 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-11961 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0063-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-11961 · Vendor Advisory