Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
79d080e1 by Salvatore Bonaccorso at 2026-07-20T11:33:34+02:00
Update notes prefixing commits for FastNetMon issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -42932,21 +42932,21 @@ CVE-2026-48696 (FastNetMon Community Edition through
1.2.9 has a buffer overflow
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48696-exabgp-sprintf-overflow
NOTE: Crosses no real security boundary, requires attacker to modify
config file
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1050
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/97b04568b6f12977aedb9682fcd9ca7ca952e84a
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/97b04568b6f12977aedb9682fcd9ca7ca952e84a
(v1.2.9)
CVE-2026-48695 (FastNetMon Community Edition through 1.2.9 contains an OS
command inje ...)
{DSA-6375-1}
- fastnetmon 1.2.9-1 (unimportant; bug #1138646)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48695-mikrotik-cmd-injection
NOTE: Crosses no meaningful security boundary
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1047
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/54a95427a1f6fe0237ddb0c3fc14622df1c93870
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/54a95427a1f6fe0237ddb0c3fc14622df1c93870
(v1.2.9)
CVE-2026-48694 (FastNetMon Community Edition through 1.2.9 contains a
configuration in ...)
{DSA-6375-1}
- fastnetmon 1.2.9-1 (unimportant; bug #1138646)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48694-juniper-netconf-injection
NOTE: Crosses no meaningful security boundary
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1049
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/6f58184fb60248df011c4c379bf445e07609ad27
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/6f58184fb60248df011c4c379bf445e07609ad27
(v1.2.9)
CVE-2026-48693 (FastNetMon Community Edition through 1.2.9 is vulnerable to a
local sy ...)
- fastnetmon <unfixed> (unimportant)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48693-symlink-tmp
@@ -42960,14 +42960,14 @@ CVE-2026-48691 (FastNetMon Community Edition through
1.2.9 contains an integer o
- fastnetmon 1.2.9-1 (unimportant; bug #1138646)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48691-bgp-as-path-overflow
NOTE: Not a vulnerability, at best an interop issue
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/94c66d5b100c42fb8bd10a22ca595e46895d60d0
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/94c66d5b100c42fb8bd10a22ca595e46895d60d0
(v1.2.9)
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1054
CVE-2026-48690 (FastNetMon Community Edition through 1.2.9 contains an integer
overflo ...)
{DSA-6375-1}
- fastnetmon 1.2.9-1 (unimportant; bug #1138646)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48690-packet-storage-integer-overflow
NOTE: Crosses no real security boundary, requires attacker to modify
config file
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/4606af43731055297063177263c0107b82ef8986
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/4606af43731055297063177263c0107b82ef8986
(v1.2.9)
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1056
CVE-2026-48689 (FastNetMon Community Edition through 1.2.9 contains an
off-by-one heap ...)
{DSA-6375-1}
@@ -42976,7 +42976,7 @@ CVE-2026-48689 (FastNetMon Community Edition through
1.2.9 contains an off-by-on
[bullseye] - fastnetmon <not-affected> (Vulnerable code introduced
later)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48689-dynamic-buffer-off-by-one
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1051
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/fa80390ed446f887ca6fa39c9e5b6fff8846e822
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/fa80390ed446f887ca6fa39c9e5b6fff8846e822
(v1.2.9)
NOTE: Introduced by:
https://github.com/pavel-odintsov/fastnetmon/commit/7836db2091522831c703c5a9dc3f39be9f12def5
(v1.2.6)
CVE-2026-48688 (FastNetMon Community Edition through 1.2.9 contains multiple
out-of-bo ...)
{DSA-6375-1}
@@ -42984,9 +42984,9 @@ CVE-2026-48688 (FastNetMon Community Edition through
1.2.9 contains multiple out
[bookworm] - fastnetmon <not-affected> (Vulnerable code introduced
later)
[bullseye] - fastnetmon <not-affected> (Vulnerable code introduced
later)
NOTE:
https://lorikeetsecurity.com/blog/fastnetmon-cve-2026-48688-bgp-mp-reach-nlri-ipv6
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/04e26ac2e0861efe7a50f3c3fd27e57f840aa4a3
(v1.2.9)
+ NOTE: Fixed by:
https://github.com/pavel-odintsov/fastnetmon/commit/04e26ac2e0861efe7a50f3c3fd27e57f840aa4a3
(v1.2.9)
NOTE: https://github.com/pavel-odintsov/fastnetmon/pull/1055
- NOTE:
https://github.com/pavel-odintsov/fastnetmon/commit/d4420c49908d33e837a26ea849339fcfa3f36c2d
(v1.2.6)
+ NOTE: Introduced with:
https://github.com/pavel-odintsov/fastnetmon/commit/d4420c49908d33e837a26ea849339fcfa3f36c2d
(v1.2.6)
CVE-2026-48687 (FastNetMon Community Edition through 1.2.9 contains an OS
command inje ...)
{DSA-6375-1}
- fastnetmon 1.2.9-1 (unimportant; bug #1138646)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79d080e112f4b44719797ec1eb3b3cb9565dd88e
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/79d080e112f4b44719797ec1eb3b3cb9565dd88e
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
