CVE catalog

CVE-2026-48683

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template bran

[CVE catalog]

Severity
Critical · CVSS 9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.33% · Oct 25, 2026

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. In src/netflow_plugin/netflow_v9_collector.cpp, the Data template branch (lines 1695-1702) iterates over flow records without performing a per-iteration bounds check against the packet end pointer. In contrast, the Options template branch (lines 1709-1719) correctly checks 'if (pkt + offset + field_template->total_length > packet_end)' before each iteration. The Data branch omits this check entirely. Since template definitions are sent by the network peer (and are unauthenticated UDP), an attacker can craft templates that cause the parser to read arbitrary memory past the packet buffer. This can leak sensitive memory contents or cause a crash.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfastnetmonsid1.2.9-1fixed
Debianfastnetmonforky1.2.9-1fixed
Debianfastnetmontrixie1.2.9-0+deb13u1fixed
Debianfastnetmontrixie-security1.2.9-0+deb13u1fixed
Debianfastnetmonbookworm1.2.4-2+deb12u1vulnerable
Debianfastnetmonbookworm-security1.2.4-2+deb12u1vulnerable
CpefastnetmonNot reportedNot reportedvulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfastnetmonsourcesid1.2.9-1unimportantNot reported[1138646]
Debianfastnetmonsourceforky1.2.9-1unimportantNot reported[1138646]
Debianfastnetmonsourcetrixie1.2.9-0+deb13u1not yet assignedNot reported[1138646]
Debianfastnetmonsourcebookworm(unfixed)unimportantNot reported[1138646]

[Debian bug #1138646]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [fastnetmon]Affected
    Details (6)

    • 1.2.4-2+deb12u1 · amd64 · bookworm

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.8-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · amd64 · bookworm-security

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

    • 1.2.4-2+deb12u1 · arm64 · bookworm-security

      Affected

      nvd · fastnetmon · debian · bookworm; nvd · fastnetmon · debian · 12

[Debian 13 (Trixie)]

  • [fastnetmon]Fixed
    Details (4)

    • 1.2.9-0+deb13u1 · amd64 · trixie

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · amd64 · trixie-security

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

    • 1.2.9-0+deb13u1 · arm64 · trixie-security

      Fixed · Fixed: 1.2.9-0+deb13u1

      nvd · fastnetmon · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]