pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported formats, but this requirement has been poorly documented. If an application calls the function with an argument that deviates from the expected format, the function can read data beyond the end of the provided string and write data beyond the end of the allocated buffer.

According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.(CVE-2025-11961)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libpcap security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libpcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.(CVE-2025-11961)

Tenable has extracted the preceding description block directly from the EulerOS libpcap security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the libpcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes     characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the     end of the provided buffer.(CVE-2025-11964)

    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.(CVE-2025-11961)

Tenable has extracted the preceding description block directly from the EulerOS libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0123 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-11961:
    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:20075-1 advisory.

    - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to     out-of-bounds       read and write (bsc#1255765).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-1e3425e7ea advisory.

    New version 1.10.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0062-1 advisory.

    - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to     out-of-bounds       read and write (bsc#1255765).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0063-1 advisory.

    - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to     out-of-bounds       read and write (bsc#1255765).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0036-1 advisory.

    - CVE-2025-11961: missing validation of provided MAC-48 address string in `pcap_ether_aton()` can lead to     out-of-bounds       read and write (bsc#1255765).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-274010c760 advisory.

    New version 1.10.6

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of libpcap installed on the remote host is prior to 1.10.6. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-001-02 advisory.

    New libpcap packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer. The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented. If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer. (CVE-2025-11961)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
302624	EulerOS Virtualization 2.12.0 : libpcap (EulerOS-SA-2026-1493)	Nessus	Huawei Local Security Checks	low
302568	EulerOS Virtualization 2.12.1 : libpcap (EulerOS-SA-2026-1436)	Nessus	Huawei Local Security Checks	low
302389	EulerOS 2.0 SP12 : libpcap (EulerOS-SA-2026-1399)	Nessus	Huawei Local Security Checks	low
302376	EulerOS 2.0 SP12 : libpcap (EulerOS-SA-2026-1368)	Nessus	Huawei Local Security Checks	low
301610	EulerOS 2.0 SP13 : libpcap (EulerOS-SA-2026-1246)	Nessus	Huawei Local Security Checks	low
301570	EulerOS 2.0 SP13 : libpcap (EulerOS-SA-2026-1282)	Nessus	Huawei Local Security Checks	low
301051	TencentOS Server 4: libpcap (TSSA-2026:0123)	Nessus	Tencent Local Security Checks	low
296575	openSUSE 16 Security Update : libpcap (openSUSE-SU-2026:20075-1)	Nessus	SuSE Local Security Checks	low
294855	Fedora 42 : libpcap (2026-1e3425e7ea)	Nessus	Fedora Local Security Checks	low
282493	SUSE SLES12 Security Update : libpcap (SUSE-SU-2026:0062-1)	Nessus	SuSE Local Security Checks	low
282490	SUSE SLED15 / SLES15 Security Update : libpcap (SUSE-SU-2026:0063-1)	Nessus	SuSE Local Security Checks	low
281909	openSUSE 15 Security Update : libpcap (SUSE-SU-2026:0036-1)	Nessus	SuSE Local Security Checks	low
281900	Fedora 43 : libpcap (2026-274010c760)	Nessus	Fedora Local Security Checks	low
281605	Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-001-02)	Nessus	Slackware Local Security Checks	low
281502	Linux Distros Unpatched Vulnerability : CVE-2025-11961	Nessus	Misc.	low

Detections

Analytics

CVE-2025-11961

low

Tenable Plugins

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low