pali igmpproxy up to 0.4 IGMPv3 Membership Report Packet src/igmpproxy.c recv_igmp null pointer dereference

Summaryinfo

A vulnerability categorized as problematic has been discovered in pali igmpproxy up to 0.4. This vulnerability affects the function recv_igmp of the file src/igmpproxy.c of the component IGMPv3 Membership Report Packet Handler. Such manipulation leads to null pointer dereference. This vulnerability is traded as CVE-2025-50681. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.

Detailsinfo

A vulnerability was found in pali igmpproxy up to 0.4 and classified as problematic. Affected by this issue is the function recv_igmp of the file src/igmpproxy.c of the component IGMPv3 Membership Report Packet Handler. The manipulation with an unknown input leads to a null pointer dereference vulnerability. Using CWE to declare the problem leads to CWE-476. A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. Impacted is availability. CVE summarizes:

igmpproxy 0.4 before commit 2b30c36 allows remote attackers to cause a denial of service (application crash) via a crafted IGMPv3 membership report packet with a malicious source address. Due to insufficient validation in the `recv_igmp()` function in src/igmpproxy.c, an invalid group record type can trigger a NULL pointer dereference when logging the address using `inet_fmtsrc()`. This vulnerability can be exploited by sending malformed multicast traffic to a host running igmpproxy, leading to a crash. igmpproxy is used in various embedded networking environments and consumer-grade IoT devices (such as home routers and media gateways) to handle multicast traffic for IPTV and other streaming services. Affected devices that rely on unpatched versions of igmpproxy may be vulnerable to remote denial-of-service attacks across a LAN .

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2025-50681 since 06/16/2025. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 279446 (Linux Distros Unpatched Vulnerability : CVE-2025-50681), which helps to determine the existence of the flaw in a target environment.

Applying the patch 2b30c36 is able to eliminate this problem.

The vulnerability is also documented in the databases at Tenable (279446) and EUVD (EUVD-2025-204534). Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• pali

Name

• igmpproxy

Version

• 0.1
• 0.2
• 0.3
• 0.4

Website

• Product: https://github.com/pali/igmpproxy/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion