CVE-2025-11961

Katalog CVE

CVSS 1.9 · Low EPSS 0,12%

Kerentanan Heap-based Buffer Overflow. Skor CVSS 3.1 1.9 (Low) menurut tcpdump.org.

Deskripsi (NVD)

pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.

Rincian

Terbit di NVD

31 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

1.9 (Low), sumber tcpdump.org
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-126: Buffer Over-read

EPSS (30 hari)

0,12% peluang dieksploitasi; lebih tinggi dari 1,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/the-tcpdump-group/libpcap/commit/b2d2f9a9a0581c40780bde509f7cc715920f1c02