CVE catalog

CVE-2025-11961

libpcap: CVE-2025-11961

[CVE catalog]

Severity
Low · CVSS 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.12% · Oct 25, 2026

pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibpcapsid1.11.0-1fixed
Debianlibpcapforky1.11.0-1fixed
Debianlibpcaptrixie1.10.5-2vulnerable
Debianlibpcapbookworm1.10.3-1vulnerable
Ubuntulibpcappro1.9.1-2vulnerable
Ubuntulibpcappro1.9.1-3vulnerable
Ubuntulibpcappro1.9.1-3ubuntu1.20.04.1vulnerable
Ubuntulibpcappro1.9.1-3ubuntu1.20.04.1+esm1vulnerable
Ubuntulibpcap22.041.10.0-2build1vulnerable
Ubuntulibpcap22.041.10.1-4vulnerable
Ubuntulibpcap22.041.10.1-4build1vulnerable
Ubuntulibpcap22.041.10.1-4ubuntu1.22.04.1vulnerable
Ubuntulibpcap22.041.10.1-4ubuntu1.22.04.2vulnerable
Ubuntulibpcap24.041.10.4-4vulnerable
Ubuntulibpcap24.041.10.4-4ubuntu3vulnerable
Ubuntulibpcap24.041.10.4-4.1ubuntu2vulnerable
Ubuntulibpcap24.041.10.4-4.1ubuntu3vulnerable
Ubuntulibpcap24.041.10.4-4.1ubuntu3.1vulnerable
Ubuntulibpcap25.101.10.5-2ubuntu1vulnerable
Ubuntulibpcap25.101.10.5-2ubuntu2vulnerable
Ubuntulibpcap26.041.10.5-2ubuntu2vulnerable
Ubuntulibpcap26.041.10.5-2ubuntu3vulnerable
Ubuntulibpcap26.041.10.6-1ubuntu1vulnerable
Ubuntulibpcap26.041.10.6-1ubuntu1.1vulnerable
Alpinelibpcap3.211.10.7-r0fixed
Alpinelibpcap3.221.10.7-r0fixed
Alpinelibpcap3.231.10.7-r0fixed
Alpinelibpcap3.241.10.6-r0fixed
Opensuselibpcapleap 16.01.10.5-160000.4.1fixed
Opensuselibpcaptumbleweed1.10.6-1.1fixed
Suselibpcaplinux micro 6.21.10.5-160000.4.1fixed
Suselibpcaplinux enterprise server 16.01.10.5-160000.4.1fixed
Suselibpcaplinux enterprise server for sap applications 16.01.10.5-160000.4.1fixed
Suselibpcaplinux micro 6.01.10.4-4.1fixed
Suselibpcaplinux enterprise micro 5.31.10.1-150400.3.9.1fixed
Suselibpcaplinux enterprise micro 5.41.10.1-150400.3.9.1fixed
Suselibpcaplinux enterprise micro 5.51.10.1-150400.3.9.1fixed
Suselibpcaplinux enterprise server ltss extended security 12 sp51.8.1-10.9.1fixed
Suselibpcaplinux enterprise micro 5.21.9.1-150300.3.6.1fixed
Opensuselibpcapleap 15.61.10.4-150600.3.9.1fixed
Suselibpcaplinux enterprise module for basesystem 15 sp71.10.5-150700.3.7.1fixed
Suselibpcaplinux enterprise module for package hub 15 sp71.10.5-150700.3.7.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibpcapsourcesid1.10.6-1not yet assignedNot reported[1124381]
Debianlibpcapsourceforky1.10.6-1not yet assignedNot reported[1124381]
Debianlibpcapsourcetrixie(unfixed)not yet assignedNot reported[1124381]
Debianlibpcapsourcebookworm(unfixed)not yet assignedNot reported[1124381]
Alpinelibpcapapk3.211.10.7-r0Not reportedALPINE-CVE-2025-11961Not reported
Alpinelibpcapapk3.221.10.7-r0Not reportedALPINE-CVE-2025-11961Not reported
Alpinelibpcapapk3.231.10.7-r0Not reportedALPINE-CVE-2025-11961Not reported
Alpinelibpcapapk3.241.10.6-r0Not reportedALPINE-CVE-2025-11961Not reported
Opensuselibpcaprpmleap 16.01.10.5-160000.4.1Not reportedOPENSUSE-SU-2026:20075-1Not reported
Opensuselibpcaprpmtumbleweed1.10.6-1.1Not reportedOPENSUSE-SU-2026:10032-1Not reported
Suselibpcaprpmlinux micro 6.21.10.5-160000.4.1Not reportedSUSE-SU-2026:20153-1Not reported
Suselibpcaprpmlinux enterprise server 16.01.10.5-160000.4.1Not reportedSUSE-SU-2026:20120-1Not reported
Suselibpcaprpmlinux enterprise server for sap applications 16.01.10.5-160000.4.1Not reportedSUSE-SU-2026:20120-1Not reported
Suselibpcaprpmlinux micro 6.01.10.4-4.1Not reportedSUSE-SU-2026:20048-1Not reported
Suselibpcaprpmlinux enterprise micro 5.31.10.1-150400.3.9.1Not reportedSUSE-SU-2026:0575-1Not reported
Suselibpcaprpmlinux enterprise micro 5.41.10.1-150400.3.9.1Not reportedSUSE-SU-2026:0575-1Not reported
Suselibpcaprpmlinux enterprise micro 5.51.10.1-150400.3.9.1Not reportedSUSE-SU-2026:0575-1Not reported
Suselibpcaprpmlinux enterprise server ltss extended security 12 sp51.8.1-10.9.1Not reportedSUSE-SU-2026:0062-1Not reported
Suselibpcaprpmlinux enterprise micro 5.21.9.1-150300.3.6.1Not reportedSUSE-SU-2026:0053-1Not reported
Opensuselibpcaprpmleap 15.61.10.4-150600.3.9.1Not reportedSUSE-SU-2026:0036-1Not reported
Suselibpcaprpmlinux enterprise module for basesystem 15 sp71.10.5-150700.3.7.1Not reportedSUSE-SU-2026:0063-1Not reported
Suselibpcaprpmlinux enterprise module for package hub 15 sp71.10.5-150700.3.7.1Not reportedSUSE-SU-2026:0063-1Not reported

[Debian bug #1124381]

Notes

[trixie] libpcap: Minor issue [bookworm] libpcap: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [libpcap0.8]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.3-1 · amd64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

    • 1.10.3-1 · arm64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

  • [libpcap0.8-dev]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.3-1 · amd64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

    • 1.10.3-1 · arm64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

  • [libpcap-dev]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.3-1 · amd64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

    • 1.10.3-1 · arm64 · bookworm

      Affected

      dsa · libpcap · debian · bookworm; dsa · libpcap · debian · 12

[Debian 13 (Trixie)]

  • [libpcap0.8-dev]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.5-2 · amd64 · trixie

      Affected

      dsa · libpcap · debian · 13

    • 1.10.5-2 · arm64 · trixie

      Affected

      dsa · libpcap · debian · 13

  • [libpcap0.8t64]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.5-2 · amd64 · trixie

      Affected

      dsa · libpcap · debian · 13

    • 1.10.5-2 · arm64 · trixie

      Affected

      dsa · libpcap · debian · 13

  • [libpcap-dev]Affected

    Source package: [libpcap]

    Details (2)

    • 1.10.5-2 · amd64 · trixie

      Affected

      dsa · libpcap · debian · 13

    • 1.10.5-2 · arm64 · trixie

      Affected

      dsa · libpcap · debian · 13

[openSUSE Tumbleweed]

  • [libpcap1]Unknown

    Source package: [libpcap]

    Details (1)

    • 1.10.6-1.6 · x86_64 · tumbleweed

      Unknown · Fixed: 1.10.6-1.1

      Version impact unknown

      dsa · libpcap · opensuse · tumbleweed

  • [libpcap1-32bit]Unknown

    Source package: [libpcap]

    Details (1)

    • 1.10.6-1.6 · x86_64 · tumbleweed

      Unknown · Fixed: 1.10.6-1.1

      Version impact unknown

      dsa · libpcap · opensuse · tumbleweed

  • [libpcap-devel]Unknown

    Source package: [libpcap]

    Details (1)

    • 1.10.6-1.6 · x86_64 · tumbleweed

      Unknown · Fixed: 1.10.6-1.1

      Version impact unknown

      dsa · libpcap · opensuse · tumbleweed

  • [libpcap-devel-32bit]Unknown

    Source package: [libpcap]

    Details (1)

    • 1.10.6-1.6 · x86_64 · tumbleweed

      Unknown · Fixed: 1.10.6-1.1

      Version impact unknown

      dsa · libpcap · opensuse · tumbleweed

  • [libpcap-devel-static]Unknown

    Source package: [libpcap]

    Details (1)

    • 1.10.6-1.6 · x86_64 · tumbleweed

      Unknown · Fixed: 1.10.6-1.1

      Version impact unknown

      dsa · libpcap · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]