CVE catalog

CVE-2024-56072

fastnetmon: CVE-2024-56072

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.72% · Oct 25, 2026

An issue was discovered in FastNetMon Community Edition through 1.2.7. The sFlow v5 plugin allows remote attackers to cause a denial of service (application crash) via a crafted packet that specifies many sFlow samples.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfastnetmonsid1.2.9-1fixed
Debianfastnetmonforky1.2.9-1fixed
Debianfastnetmontrixie1.2.9-0+deb13u1fixed
Debianfastnetmontrixie-security1.2.9-0+deb13u1fixed
Debianfastnetmonbookworm1.2.4-2+deb12u1fixed
Debianfastnetmonbookworm-security1.2.4-2+deb12u1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfastnetmonsourcesid1.2.8-1not yet assignedNot reported[1090388]
Debianfastnetmonsourceforky1.2.8-1not yet assignedNot reported[1090388]
Debianfastnetmonsourcetrixie1.2.8-1not yet assignedNot reported[1090388]
Debianfastnetmonsourcebookworm1.2.4-2+deb12u1not yet assignedNot reported[1090388]

[Debian bug #1090388]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [fastnetmon]Fixed
    Details (6)

    • 1.2.4-2+deb12u1 · amd64 · bookworm

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · amd64 · bookworm-backports

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · arm64 · bookworm-backports

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 1.2.4-2+deb12u1

      dsa · fastnetmon · debian · bookworm; dsa · fastnetmon · debian · 12

[Debian 13 (Trixie)]

  • [fastnetmon]Fixed
    Details (4)

    • 1.2.9-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.2.8-1

      dsa · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.2.8-1

      dsa · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.2.8-1

      dsa · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.2.8-1

      dsa · fastnetmon · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]