fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

CVE-2026-92698

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, processsflowflowsample in src/sflowplugin/sflowcollector.cpp passes the attacker-controlled sflowrawprotocolheadert.headersize to parserawpackettosimplepacketfull as its trusted captured length without...

CVE-2026-93424

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...

CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

CVE-2026-92695

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is registered through pcaploop and processes captured frames when pcap = on without checking packethdr-caplen. A short frame or an...

CVE-2026-92694

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in src/fastnetmonlogic.cpp iterates ipv6hostcounters.averagespeedmap without holding countermapmutex while recalculatespeed inserts new keys a...

CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92694

A flaw was found in FastNetMon. A remote attacker could trigger a race condition—a timing conflict where multiple operations access shared data simultaneously—resulting in a Denial of Service DoS. When processing network traffic within monitored IPv6 ranges, the application updates internal traff...

CVE-2026-92697

A flaw was found in FastNetMon. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS by crashing the service. By sending specially crafted network packets containing unterminated data fields to the NetFlow collector, an attacker can trigger an out-of-bound...

CVE-2026-92695

A flaw was found in FastNetMon. When packet capture is enabled, the packet parser fails to properly validate the length of captured network frames before reading header data. A remote attacker can exploit this flaw by sending specially crafted packets with manipulated header lengths, triggering a...

CVE-2026-92693

A flaw was found in FastNetMon. This vulnerability allows an unauthenticated remote attacker to cause a Denial of Service DoS or potentially disclose memory contents. By sending a crafted network packet record containing a truncated IPv6 fragment header, an attacker triggers an out-of-bounds memo...

CVE-2026-93424

A flaw was found in FastNetMon. An unauthenticated remote attacker with access to the NetFlow or IPFIX listening ports can trigger a race condition during concurrent template updates and traffic processing. This issue causes the application to access memory after it has been freed a use-after-fre...

CVE-2026-92698

A flaw was found in FastNetMon. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted sFlow packet with an inflated header size. Because the application fails to properly validate the header length against the received packet buffer, processing the packe...

CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

UBUNTU-CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

UBUNTU-CVE-2026-92697

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the NetFlow v9 collector calls strlen on an attacker-controlled interface-description field without bounding the scan to the field’s declared length. Although fields longer than 128 bytes are excluded from...

UBUNTU-CVE-2026-92694

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in src/fastnetmonlogic.cpp iterates ipv6hostcounters.averagespeedmap without holding countermapmutex while recalculatespeed inserts new keys a...

Linux Distros Unpatched Vulnerability : CVE-2026-92694

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in drawtableipv6 in...

Linux Distros Unpatched Vulnerability : CVE-2026-92695

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parsepacket callback in src/pcapplugin/pcapcollector.cpp is...

UBUNTU-CVE-2026-93424

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, peerfindtemplate in src/netflowplugin/netflowcollector.cpp and src/netflowplugin/netflowv9collector.cpp returns a pointer into globalnetflow9templates after releasing the cache mutex. On deployments with at...