Remote Out-of-Bounds Read Vulnerability in FastNetMon DDoS Detector

CVE-2026-92698

What is CVE-2026-92698?

FastNetMon is a high-performance DDoS detection system that has a vulnerability in its sFlow plugin affecting versions 1.2.9 and earlier. A flaw in process_sflow_flow_sample() allows an attacker to exploit the sflow_raw_protocol_header_t.header_size without proper validation. An inflated header size may lead to a false end pointer exceeding the received sFlow v5 UDP buffer, bypassing safety checks and potentially leading to unauthenticated remote out-of-bounds reads or crashes of the process. Adjacent bytes might be exposed via the parsed flow fields, raising concerns over data integrity and confidentiality. No patches are currently available to address this issue.

References