PT-2026-5363 · Tcpflow · Tcpflow
Mobasi-Team
·
Publicado
2026-01-29
·
Atualizado
2026-01-30
·
CVE-2026-25061
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
tcpflow versions up to and including 1.61
Description
tcpflow is a TCP/IP packet demultiplexer. The software parses 802.11 management frame elements and performs a length check on an incorrect field when handling the TIM (Timing Advertisement) element. A specially crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past
tim.bitmap[251]. The overflow is small, and a denial-of-service (DoS) attack is the likely impact, although code execution is possible. The affected structure is allocated on the stack within the handle beacon() function and related handlers.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Tcpflow