CVE-2025-11961
OOBR and OOBW in pcap_ether_aton() in libpcap
Summary
OOBR and OOBW in pcap_ether_aton() in libpcap
Original description
The description as published by the source.
pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2025-11961 libpcap Fixed in: 1.10.7-r0
- Debian DEBIAN-CVE-2025-11961 libpcap
- Ubuntu UBUNTU-CVE-2025-11961 libpcap
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com