CVE-2025-11961: OOBR and OOBW in pcap_ether_aton() in libpcap
OOBR and OOBW in pcapetheraton() in libpcap
Other sources
pcapetheraton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.
— NVD
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11961?
CVE-2025-11961 has a moderate severity level due to the potential for incomplete validation of MAC addresses.
How do I fix CVE-2025-11961?
To fix CVE-2025-11961, ensure that applications utilizing libpcap properly validate the format of MAC-48 addresses before passing them to pcap_ether_aton().
What software versions are affected by CVE-2025-11961?
The vulnerability affects all versions of libpcap where the pcap_ether_aton() function is utilized without adequate documentation of address format requirements.
What is the impact of CVE-2025-11961?
The impact of CVE-2025-11961 may allow applications to behave unexpectedly when improperly formatted MAC addresses are processed.
Is there a patch available for CVE-2025-11961?
Yes, a patch addressing CVE-2025-11961 has been committed to the libpcap repository.