CVE-2025-11961
Low
Description
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
SeverityLow
CVSS1.9
Exploit probability2. percentile0.1%
ProductThe Tcpdump Group Libpcap
PublishedDec 31, 2025
First seenDec 31, 2025
Weakness typeCWE-126CWE-126CWE-122CWE-122
How to fix
Update
- The Tcpdump Group libpcap1.10.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| The Tcpdump Group libpcap | v < 1.10.6 | 1.10.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.