CVE-2026-92693 Details
Description
FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, parse_raw_packet_to_simple_packet_full() in src/simple_packet_parser_ng.cpp dereferences ipv6_extension_header_fragment_t when IpProtocolNumberIPV6_FRAG is present without first verifying that the eight-byte Fragment header remains. A crafted sFlow v5 RAW_PACKET_HEADER record can remotely reach this shared parser with the Fragment bytes omitted, causing an unauthenticated remote out-of-bounds read. The supplied harness detects the read under AddressSanitizer, but the advisory does not establish a production process crash. No fixed release is available as of this review.
A vulnerability allowing for an out-of-bounds read has been identified in FastNetMon versions through 1.2.9. The issue arises in the function 'parse_raw_packet_to_simple_packet_full()' within 'src/simple_packet_parser_ng.cpp', where the parser dereferences an IPv6 Fragment extension header without proper bounds checking. This flaw can be exploited remotely and without authentication by sending a specially crafted sFlow v5 RAW_PACKET_HEADER record that omits the Fragment header bytes, leading to an unauthorized out-of-bounds read. While the vulnerability has been demonstrated to cause a memory violation under AddressSanitizer, it has not been shown to crash the application in a production environment.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 5, 2026CISA-ADP
Assessed Nov 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-jmjw-392h-4g93 | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/pavel-odintsov/fastnetmon/commit/1da80df73620c6d0aa4462e9611e65047529b12a | [email protected] | Source CodeVendor |
| https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-jmjw-392h-4g93 | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| FastNetMon | <= 1.2.9 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 6, 2026 | CVE Modified | CISA-ADP |
| Nov 5, 2026 | New CVE Received | [email protected] |