FastNetMon Community Edition up to 1.2.9 netflow_v9_collector.cpp process_netflow_v9_options_template options out-of-bounds

Summaryinfo

A vulnerability, which was classified as problematic, was found in FastNetMon Community Edition up to 1.2.9. The affected element is the function process_netflow_v9_options_template of the file src/netflow_plugin/netflow_v9_collector.cpp. Executing a manipulation of the argument options can lead to out-of-bounds. This vulnerability appears as CVE-2026-48684. There is no available exploit.

Detailsinfo

A vulnerability was found in FastNetMon Community Edition up to 1.2.9. It has been declared as problematic. This vulnerability affects the function process_netflow_v9_options_template of the file src/netflow_plugin/netflow_v9_collector.cpp. The manipulation of the argument options with an unknown input leads to a out-of-bounds vulnerability. The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer. As an impact it is known to affect confidentiality. CVE summarizes:

FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. In process_netflow_v9_options_template() (src/netflow_plugin/netflow_v9_collector.cpp), the scope parsing loop (lines 224-229) iterates until scopes_offset reaches the attacker-controlled option_scope_length value, reading netflow9_template_flowset_record_t structures at each step. No bounds check validates that (zone_address + scopes_offset + sizeof(record)) stays within the flowset. The same issue affects the options field loop (lines 241-257) with option_length. Furthermore, option_scope_length is not validated to be a multiple of sizeof(netflow9_template_flowset_record_t), potentially causing misaligned reads. An attacker can trigger reads past the end of the UDP packet buffer.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-48684 since 05/22/2026. The exploitation appears to be easy. There are known technical details, but no exploit is available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• FastNetMon

Name

• Community Edition

Version

• 1.2.0
• 1.2.1
• 1.2.2
• 1.2.3
• 1.2.4
• 1.2.5
• 1.2.6
• 1.2.7
• 1.2.8
• 1.2.9

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion