On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the end of the provided buffer.

An update of the libpcap package has been released.

According to the versions of the libpcap package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes     characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the     end of the provided buffer.(CVE-2025-11964)

    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.(CVE-2025-11961)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the libpcap package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes     characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the     end of the provided buffer.(CVE-2025-11964)

    pcap_ether_aton() is an auxiliary function in libpcap, it takes a string argument and returns a fixed-size     allocated buffer.  The string argument must be a well-formed MAC-48 address in one of the supported     formats, but this requirement has been poorly documented.  If an application calls the function with an     argument that deviates from the expected format, the function can read data beyond the end of the provided     string and write data beyond the end of the allocated buffer.(CVE-2025-11961)

Tenable has extracted the preceding description block directly from the EulerOS libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - On Windows only, if libpcap needs to convert a Windows error message to UTF-8 and the message includes     characters that UTF-8 represents using 4 bytes, utf_16le_to_utf_8_truncated() can write data beyond the     end of the provided buffer. (CVE-2025-11964)

Note that Nessus relies on the presence of the package as reported by the vendor.

The version of libpcap installed on the remote host is prior to 1.10.6. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-001-02 advisory.

    New libpcap packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the libpcap security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
335075	Photon OS 5.0: Libpcap PHSA-2026-5.0-92-0954	Nessus	PhotonOS Local Security Checks	Local	medium
319478	EulerOS Virtualization 2.13.0 : libpcap (EulerOS-SA-2026-2173)	Nessus	Huawei Local Security Checks	Local	low
319361	EulerOS Virtualization 2.13.1 : libpcap (EulerOS-SA-2026-2134)	Nessus	Huawei Local Security Checks	Local	low
301610	EulerOS 2.0 SP13 : libpcap (EulerOS-SA-2026-1246)	Nessus	Huawei Local Security Checks	Local	low
301570	EulerOS 2.0 SP13 : libpcap (EulerOS-SA-2026-1282)	Nessus	Huawei Local Security Checks	Local	low
281674	Linux Distros Unpatched Vulnerability : CVE-2025-11964	Nessus	Misc.	Local	low
281605	Slackware Linux 15.0 / current libpcap Multiple Vulnerabilities (SSA:2026-001-02)	Nessus	Slackware Local Security Checks	Local	low

Detections

Analytics

CVE-2025-11964

low

Tenable Plugins

medium

low

low

low

low

low

low