CVE-2025-11964: Out-of-bounds Write

On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf16letoutf8truncated can write data beyond the end of the provided buffer...

CVE-2025-11961: Buffer Over-read

pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function...

Linux Distros Unpatched Vulnerability : CVE-2025-11961

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pcapetheraton is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-form...

PT-2025-54266

Name of the Vulnerable Software and Affected Versions libpcap affected versions not specified Description On Windows operating systems, a buffer overflow can occur when libpcap converts a Windows error message to UTF-8 if the message contains characters requiring 4 bytes in UTF-8 representation...

EUVD-2011-1933

Malware in sbrugna...

EUVD-2019-6217

Malware in sbrugna...

EUVD-2019-6219

Malware in sbrugna...

EUVD-2019-6220

Malware in sbrugna...

EUVD-2019-6218

Malware in sbrugna...

EUVD-2019-6221

Malware in sbrugna...

EUVD-2023-59437

Malicious code in bioql PyPI...

EUVD-2024-48881

Malicious code in bioql PyPI...

Advisory ROSA-SA-2025-3006

Software: libpcap 1.10.5 OS: ROSA-CHROME unaffected versions = libpcap-1.10.5-1 affected versions libpcap-1.10.5-1 CVE-ID: CVE-2023-7256 BDU-ID: 2024-07427 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the libpcap library's freeaddrinfo function involves calling freeaddrinfo for the same allocat...

Linux Distros Unpatched Vulnerability : CVE-2002-1976

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using...

ROS-20250806-03

Vulnerability of network traffic analysis software tcpdump is related to boundary conditions in libpcap when reading pcapng. Exploitation of the vulnerability could allow an attacker acting remotely, cause a denial of service...

TencentOS Server 4: libpcap (TSSA-2024:0505)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0505 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Linux Distros Unpatched Vulnerability : CVE-2024-8006

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remote packet capture support enabled, one of the functions tha...

Linux Distros Unpatched Vulnerability : CVE-2023-7256

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In affected libpcap versions during the setup of a remote packet capture the internal function sockinitaddress calls getaddrinfo and possibly freeaddrinfo, but...

Azure Linux 3.0 Security Update: libpcap / nmap (CVE-2023-7256)

The version of libpcap / nmap installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-7256 advisory. - In affected libpcap versions during the setup of a remote packet capture the internal function...

Azure Linux 3.0 Security Update: libpcap / nmap (CVE-2024-8006)

The version of libpcap / nmap installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-8006 advisory. - Remote packet capture support is disabled by default in libpcap. When a user builds libpcap with remo...