fastnetmon

Community Edition FastNetMon - A high-performance DDoS detector/sensor built on top of multiple packet capture engines: NetFlow, IPFIX, sFlow, AFPACKET port mirror. What do we do? We detect hosts in the deployed network sending or receiving large volumes of traffic, packets/bytes/flows per second...

CVE-2026-92698

A flaw was found in FastNetMon. An unauthenticated remote attacker can exploit this vulnerability by sending a specially crafted sFlow packet with an inflated header size. Because the application fails to properly validate the header length against the received packet buffer, processing the packe...

UBUNTU-CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

UBUNTU-CVE-2026-92698

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, processsflowflowsample in src/sflowplugin/sflowcollector.cpp passes the attacker-controlled sflowrawprotocolheadert.headersize to parserawpackettosimplepacketfull as its trusted captured length without...

Linux Distros Unpatched Vulnerability : CVE-2026-92693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp...

DEBIAN-CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92693

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92698

The high-performance DDoS detector FastNetMon (version 1.2.9 and earlier ) is vulnerable to an unauthenticated remote out-of-bounds read and process crash . The flaw exists in src/sflow_plugin/sflow_collector.cpp within the process_sflow_flow_sample() function. The software fails to validate the ...

CVE-2026-92693 FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92693 FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parserawpackettosimplepacketfull in src/simplepacketparserng.cpp dereferences ipv6extensionheaderfragmentt when IpProtocolNumberIPV6FRAG is present without first verifying that the eight-byte Fragment header...

CVE-2026-92693

The high-performance DDoS detector FastNetMon (version 1.2.9 and earlier) contains an unauthenticated remote out-of-bounds read vulnerability. The flaw exists in the parse_raw_packet_to_simple_packet_full() function within src/simple_packet_parser_ng.cpp, where the software dereferences ipv6_exte...

fastnetmon

Edición Comunidad FastNetMon - Un detector/sensor DDoS de alto rendimiento construido sobre múltiples motores de captura de paquetes: NetFlow, IPFIX, sFlow, AFPACKET puerto espejo. ¿Qué hacemos? Detectamos hosts en la red desplegada que envían o reciben grandes volúmenes de tráfico,...

Wireshark 1.8.x < 1.8.4 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.4 advisory. - Integer overflow in the dissectsackchunk function in epan/dissectors/packet-sctp.c in the SCTP dissecto...

Wireshark 1.6.x < 1.6.14 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.6.14. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.6.14 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the...

SUSE CVE-2026-54332

gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an attacker-controlled 32-bit community count and AS path member count and sizes a slice allocation from those counts without bounding them against...

GO-2026-6122 GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS in github.com/gopacket/gopacket

GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation 104-byte UDP datagram - up to 16 GiB make - unauthenticated remote DoS in github.com/gopacket/gopacket...

PT-2026-80367

GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation 104-byte UDP datagram - up to 16 GiB make - unauthenticated remote DoS in github.com/gopacket/gopacket...

GoPacket's sFlow ExtendedGatewayFlow decoder: unbounded attacker-controlled allocation (104-byte UDP datagram -> up to 16 GiB make) -> unauthenticated remote DoS

...

Linux Distros Unpatched Vulnerability : CVE-2026-54332

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gopacket provides packet processing capabilities for Go. In version 1.6.0 and earlier, the sFlow ExtendedGatewayFlow decoder in layers/sflow.go reads an...