Heap-based buffer overflow in libpcap - CVE-2025-11961

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU120924

Heap-based buffer overflow in libpcap - CVE-2025-11961

Published: January 5, 2026


Vulnerability identifier: #VU120924
CSH Severity: Low
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-11961
CWE-ID: CWE-122
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the pcap_ether_aton() function in nametoaddr.c. A local privileged user can trigger a heap-based buffer overflow and execute arbitrary code on the target system.


Affected software

libpcap
SUSE Linux Enterprise Server 12 SP5 LTSS Extended
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
Basesystem Module
SUSE Package Hub 15
openSUSE Leap
openEuler
Anolis OS
libpcap-debugsource
libpcap-devel
libpcap1
libpcap1-debuginfo
libpcap
libpcap-debuginfo
libpcap-help
libpcap1-64bit
libpcap1-64bit-debuginfo
libpcap-devel-64bit
libpcap1-32bit-debuginfo
libpcap-devel-32bit
libpcap1-32bit
libpcap-devel-static
libpcap-doc

How to mitigate CVE-2025-11961

Install updates from vendor's website.

libpcap - update to 1.10.6
libpcap-debugsource - addressed in versions 1.8.1-10.9.1, 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap-devel - addressed in versions 1.8.1-10.9.1, 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap1 - addressed in versions 1.8.1-10.9.1, 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap1-debuginfo - addressed in versions 1.8.1-10.9.1, 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap - addressed in versions 1.9.1-8, 1.10.3-4, 1.10.4-5
libpcap-debuginfo - addressed in versions 1.9.1-8, 1.10.3-4, 1.10.4-5
libpcap-debugsource - addressed in versions 1.9.1-8, 1.10.3-4, 1.10.4-5
libpcap-devel - addressed in versions 1.9.1-8, 1.10.3-4, 1.10.4-5
libpcap-help - addressed in versions 1.9.1-8, 1.10.3-4, 1.10.4-5
libpcap1-64bit - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1
libpcap1-64bit-debuginfo - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1
libpcap-devel-64bit - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1
libpcap1-32bit-debuginfo - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap-devel-32bit - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1
libpcap1-32bit - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1, 1.10.5-150700.3.7.1
libpcap-devel-static - addressed in versions 1.9.1-150300.3.6.1, 1.10.1-150400.3.9.1, 1.10.4-150600.3.9.1
libpcap-doc - update to 1.10.4-3
libpcap-devel - update to 1.10.4-3
libpcap - update to 1.10.4-3

External References

Related Security Bulletins