Lucene search
+L

771 matches found

Snyk
Snyk
•added 2025/12/31 1:44 a.m.•14 views

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the utf16letoutf8truncated function. An attacker can cause data to be written beyond the end of a buffer by triggering the conversion of Windows error messages containing characters that require 4-byte UTF-8...

1.9CVSS6AI score0.00122EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/31 1:15 a.m.•18 views

CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS0.00122EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2025/12/31 1:15 a.m.•14 views

ALPINE-CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/12/31 1:15 a.m.•21 views

AZL-73344 CVE-2025-11961 affecting package nmap for versions less than 7.95-3

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2025/12/31 1:15 a.m.•27 views

AZL-73379 CVE-2025-11961 affecting package nmap for versions less than 7.93-4

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2025/12/31 1:15 a.m.•12 views

DEBIAN-CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/31 1:15 a.m.•20 views

CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS0.00117EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2025/12/31 1:15 a.m.•18 views

UBUNTU-CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2025/12/31 1:15 a.m.•9 views

CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/31 12:58 a.m.•518 views

CVE-2025-11964

CVE-2025-11964 affects libpcap on Windows where utf_16le_to_utf_8_truncated() may write past the end of the output buffer when converting certain Unicode characters (4-byte UTF‑8). Root cause is a bound check deficiency in that conversion path. Impact is memory corruption that is limited by the a...

1.9CVSS6AI score0.00122EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/12/31 12:58 a.m.•9 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS6AI score0.00122EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2025/12/31 12:58 a.m.•57 views

CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS0.00122EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/12/31 12:58 a.m.•29 views

CVE-2025-11964

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

1.9CVSS6AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/31 12:56 a.m.•59 views

CVE-2025-11961 OOBR and OOBW in pcap_ether_aton() in libpcap

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS0.00117EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/12/31 12:56 a.m.•31 views

CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0
CVE
CVE
•added 2025/12/31 12:56 a.m.•563 views

CVE-2025-11961

CVE-2025-11961 affects the libpcap library (pcap_ether_aton) with an OOB read/write when given malformed MAC-48 inputs. Concretely, packages libpcap versions older than 1.10.6-1 are affected (examples: libpcap for Fedora 42/43, Mariner 1.x). Some advisories also indicate affected downstreams (e.g...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/31 12:56 a.m.•7 views

CVE-2025-11961 OOBR and OOBW in pcap_ether_aton() in libpcap

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/12/31 12:56 a.m.•23 views

CVE-2025-11961

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

1.9CVSS5.8AI score0.00117EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•21 views

libpcap security vulnerabilities

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A security vulnerability exists in libpcap, which stems from a flaw in the handling of specific characters by the utf16letoutf8truncated function, which could lead to out-of-bounds writes...

1.9CVSS5.9AI score0.00122EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/12/31 12:00 a.m.•26 views

libpcap security vulnerabilities

libpcap is a portable C/C ++ library for network traffic capture from the Tcpdump team. A security vulnerability exists in libpcap, which stems from insufficient validation of the input format by the pcapetheraton function, which could lead to out-of-bounds reads and writes...

1.9CVSS5.9AI score0.00117EPSS
SaveExploits0References3
Rows per page
Query Builder