Out-of-Bounds Read Vulnerability in FastNetMon DDoS Detector

CVE-2026-92693

What is CVE-2026-92693?

FastNetMon, a high-performance DDoS detection and mitigation tool, has a vulnerability that affects versions up to 1.2.9, potentially allowing for an unauthenticated remote out-of-bounds read. This occurs due to the improper handling of IPv6 fragment headers in the v5 RAW_PACKET_HEADER during packet parsing. Specifically, the function parse_raw_packet_to_simple_packet_full() does not verify the presence of the necessary eight-byte Fragment header when the IpProtocolNumberIPV6_FRAG is encountered. By sending a crafted packet that omits these crucial Fragment bytes, an attacker can reach this shared parser, resulting in a read from an invalid memory segment. This vulnerability poses a substantial risk as it can be triggered remotely but does not cause a crash in the production process according to the advisory.

References