PT-2026-43309 · Unknown · Fastnetmon Community Edition
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
FastNetMon Community Edition versions prior to 1.2.10
Description
An integer overflow occurs during packet capture buffer allocation in the
allocate buffer() function. The software calculates memory size in bytes using 32-bit unsigned integer arithmetic. When the ban details records count configuration parameter is set to a value exceeding approximately 2,832,542, the multiplication overflows, leading to a memory allocation that is smaller than required. Consequently, calls to the write packet() function write data beyond the allocated buffer, resulting in heap corruption. This issue stems from the use of atoi() to parse the configuration parameter without implementing overflow checks.Recommendations
Update to version 1.2.10 or later.
As a temporary mitigation, ensure the
ban details records count configuration parameter is set to a value significantly below 2,832,542.Exploit
Fix
Heap Based Buffer Overflow
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Fastnetmon Community Edition