CVE-2026-92695— FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames

Quick assessment

Affected

pavel-odintsov fastnetmon

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

FastNetMon 是一款高性能的 DDoS 检测器与传感器。在 1.2.9 及更早版本中，位于的回调函数通过注册，并在启用时处理捕获的数据帧，但未对进行校验。若遇到短帧或攻击者操控的 IPv4 头部长度，解析器可能在已捕获字节范围之外解引用 IP 或传输层头部，从而引发越界读取并导致进程终止。截至本次评估，尚未发布修复版本。

CVSS 8.2 · High Updated Nov 06, 2026

Possible ATT&CK Techniques 1 AI

T1212 · Exploitation for Credential Access

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

FastNetMon: Legacy pcap parse_packet() has no bounds checking, causing out-of-bounds read on truncated frames

Source: CVE Program / CVE List V5

Vulnerability Description

FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, the live parse_packet() callback in src/pcap_plugin/pcap_collector.cpp is registered through pcap_loop and processes captured frames when pcap = on without checking packethdr->caplen. A short frame or an attacker-controlled IPv4 header length can make the parser dereference IP or transport headers beyond the captured bytes, causing an out-of-bounds read and process termination. No fixed release is available as of this review.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

跨界内存读

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
pavel-odintsov	fastnetmon	<= 1.2.9	-

II. Public POCs for CVE-2026-92695

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-92695

请登录查看更多情报信息。

Other References for CVE-2026-92695 (2)

https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-c27c-943r-vr8h x_refsource_CONFIRM
https://github.com/pavel-odintsov/fastnetmon/commit/5d0ee2d25fddb2db746ce4ce3326a589a2afef40 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-92695

Same Patch Batch · pavel-odintsov · 2026-11-05 · 6 CVEs total

CVE-2026-92698	8.2 HIGH	FastNetMon: sFlow header_size field trusted as parser capture length causes remote out-of-
CVE-2026-92693	8.2 HIGH	FastNetMon: IPv6 Fragment header dereferenced without bounds check in shared packet parser
CVE-2026-92697	7.5 HIGH	FastNetMon: NetFlow v9 unbounded strlen() on interface-description field causes remote out
CVE-2026-93424	7.5 HIGH	FastNetMon: NetFlow/IPFIX template cache returns unlocked pointers, causing heap-use-after
CVE-2026-92694	5.9 MEDIUM	FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts

IV. Related Vulnerabilities

Same product: fastnetmon

Same vendor: pavel-odintsov

Same weakness: CWE-125