DDoS Detection Vulnerability in FastNetMon by Pavel Odintsov

CVE-2026-92697

What is CVE-2026-92697?

FastNetMon, a high-performance DDoS detection tool, is susceptible to an out-of-bounds read issue due to improper handling of the interface-description field in the NetFlow v9 collector. In versions 1.2.9 and earlier, the strlen() function is called without properly validating the length of the attacker-controlled input, allowing a malicious actor to send crafted UDP packets. This could lead to unauthorized memory access, potentially causing the DDoS detection process to crash and resulting in service downtime. No resolution is currently available for this vulnerability.

References