CVE-2026-92695: fallo de gravedad alta en pavel-odintsov fastnetmon
FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.2epss 0.3%
FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parse_packet() callback in src/pcap_plugin/pcap_collector.cpp is registered through pcap_loop and processes captured frames when pcap = on without checking packethdr->caplen. A short frame or an attacker-controlled IPv4 header length can make the parser dereference IP or transport headers beyond the captured bytes, causing an out-of-bounds read and process termination. No fixed release is available as of this review.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Productos afectados
pavel-odintsov · fastnetmonCVEs relacionadas — pavel-odintsov fastnetmon
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-92697HIGHFastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out-of-bounds readEPSS 1.1%CVE-2026-92698HIGHFastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-bounds readEPSS 0.3%CVE-2026-93424HIGHFastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after-free on multi-port deploymentsEPSS 0.3%CVE-2026-92693HIGHFastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parserEPSS 0.3%CVE-2026-92694MEDIUMFastNetMon: IPv6 host counters map iterated without lock, racing concurrent insertsEPSS 0.2%