Unrated

UBUNTU-CVE-2025-11961

Type: advisorySource: OSV1 source record

pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.

Announced 31 Dec 2025Group revision 1

Original source ↗

UBUNTU-CVE-2025-11961

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:UBUNTU-CVE-2025-11961

libpcap

Source reference: /affected/0/package/name

Affected versions: 1.4.0-2
Source reference: /affected/0/versions
1.5.1-1
Source reference: /affected/0/versions
1.5.2-1
Source reference: /affected/0/versions
1.5.3-1
Source reference: /affected/0/versions
1.5.3-2
Source reference: /affected/0/versions
1.5.3-2ubuntu0.1
Source reference: /affected/0/versions
1.5.3-2ubuntu0.1+esm1
Source reference: /affected/0/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/1/package/name

Affected versions: 1.7.4-1
Source reference: /affected/1/versions
1.7.4-2
Source reference: /affected/1/versions
1.7.4-2ubuntu0.1
Source reference: /affected/1/versions
1.7.4-2ubuntu0.1+esm1
Source reference: /affected/1/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/2/package/name

Affected versions: 1.8.1-5ubuntu1
Source reference: /affected/2/versions
1.8.1-6ubuntu1
Source reference: /affected/2/versions
1.8.1-6ubuntu1.18.04.1
Source reference: /affected/2/versions
1.8.1-6ubuntu1.18.04.2
Source reference: /affected/2/versions
1.8.1-6ubuntu1.18.04.2+esm1
Source reference: /affected/2/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/3/package/name

Affected versions: 1.9.1-2
Source reference: /affected/3/versions
1.9.1-3
Source reference: /affected/3/versions
1.9.1-3ubuntu1.20.04.1
Source reference: /affected/3/versions
1.9.1-3ubuntu1.20.04.1+esm1
Source reference: /affected/3/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/4/package/name

Affected versions: 1.10.0-2build1
Source reference: /affected/4/versions
1.10.1-4
Source reference: /affected/4/versions
1.10.1-4build1
Source reference: /affected/4/versions
1.10.1-4ubuntu1.22.04.1
Source reference: /affected/4/versions
1.10.1-4ubuntu1.22.04.2
Source reference: /affected/4/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/5/package/name

Affected versions: 1.10.4-4
Source reference: /affected/5/versions
1.10.4-4ubuntu3
Source reference: /affected/5/versions
1.10.4-4.1ubuntu2
Source reference: /affected/5/versions
1.10.4-4.1ubuntu3
Source reference: /affected/5/versions
1.10.4-4.1ubuntu3.1
Source reference: /affected/5/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/6/package/name

Affected versions: 1.10.5-2ubuntu1
Source reference: /affected/6/versions
1.10.5-2ubuntu2
Source reference: /affected/6/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

libpcap

Source reference: /affected/7/package/name

Affected versions: 1.10.5-2ubuntu2
Source reference: /affected/7/versions
1.10.5-2ubuntu3
Source reference: /affected/7/versions
1.10.6-1ubuntu1
Source reference: /affected/7/versions
1.10.6-1ubuntu1.1
Source reference: /affected/7/versions
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra-legacy%2Ftrusty",
      "ecosystem": "Ubuntu:Pro:14.04:LTS"
    },
    "versions": [
      "1.4.0-2",
      "1.5.1-1",
      "1.5.2-1",
      "1.5.3-1",
      "1.5.3-2",
      "1.5.3-2ubuntu0.1",
      "1.5.3-2ubuntu0.1+esm1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.5.3-2ubuntu0.1+esm1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra-legacy%2Fxenial",
      "ecosystem": "Ubuntu:Pro:16.04:LTS"
    },
    "versions": [
      "1.7.4-1",
      "1.7.4-2",
      "1.7.4-2ubuntu0.1",
      "1.7.4-2ubuntu0.1+esm1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.7.4-2ubuntu0.1+esm1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra%2Fbionic",
      "ecosystem": "Ubuntu:Pro:18.04:LTS"
    },
    "versions": [
      "1.8.1-5ubuntu1",
      "1.8.1-6ubuntu1",
      "1.8.1-6ubuntu1.18.04.1",
      "1.8.1-6ubuntu1.18.04.2",
      "1.8.1-6ubuntu1.18.04.2+esm1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.8.1-6ubuntu1.18.04.2+esm1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=esm-infra%2Ffocal",
      "ecosystem": "Ubuntu:Pro:20.04:LTS"
    },
    "versions": [
      "1.9.1-2",
      "1.9.1-3",
      "1.9.1-3ubuntu1.20.04.1",
      "1.9.1-3ubuntu1.20.04.1+esm1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.9.1-3ubuntu1.20.04.1+esm1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=jammy",
      "ecosystem": "Ubuntu:22.04:LTS"
    },
    "versions": [
      "1.10.0-2build1",
      "1.10.1-4",
      "1.10.1-4build1",
      "1.10.1-4ubuntu1.22.04.1",
      "1.10.1-4ubuntu1.22.04.2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8",
          "binary_version": "1.10.1-4ubuntu1.22.04.2"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=noble",
      "ecosystem": "Ubuntu:24.04:LTS"
    },
    "versions": [
      "1.10.4-4",
      "1.10.4-4ubuntu3",
      "1.10.4-4.1ubuntu2",
      "1.10.4-4.1ubuntu3",
      "1.10.4-4.1ubuntu3.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8t64",
          "binary_version": "1.10.4-4.1ubuntu3.1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=questing",
      "ecosystem": "Ubuntu:25.10"
    },
    "versions": [
      "1.10.5-2ubuntu1",
      "1.10.5-2ubuntu2"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8t64",
          "binary_version": "1.10.5-2ubuntu2"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  },
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          }
        ]
      }
    ],
    "package": {
      "name": "libpcap",
      "purl": "pkg:deb/ubuntu/libpcap?arch=source&distro=resolute",
      "ecosystem": "Ubuntu:26.04:LTS"
    },
    "versions": [
      "1.10.5-2ubuntu2",
      "1.10.5-2ubuntu3",
      "1.10.6-1ubuntu1",
      "1.10.6-1ubuntu1.1"
    ],
    "database_specific": {
      "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-11961.json"
    },
    "ecosystem_specific": {
      "binaries": [
        {
          "binary_name": "libpcap0.8t64",
          "binary_version": "1.10.6-1ubuntu1.1"
        }
      ],
      "priority_reason": "Function not used directly by other Ubuntu packages"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event: #17542 · Revision 1
Added to Heist Feed: Sun, 25 Oct 2026 01:35:05 GMT
Publisher date: Wed, 31 Dec 2025 01:15:00 GMT

Read the original announcement

Revision history

25 Oct 2026UBUNTU-CVE-2025-11961 · Revision 1Source updated