CVE-2026-25061

Katalog CVE

CVSS 7.5 · High EPSS 0,58%

Kerentanan Out-of-bounds Write pada digitalcorpora tcpflow, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past `tim.bitmap[251]`. The overflow is small and DoS is the likely impact; code execution is potential, but still up in the air. The affected structure is stack-allocated in `handle_beacon()` and related handlers. As of time of publication, no known patches are available.

Rincian

Terbit di NVD

29 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,58% peluang dieksploitasi; lebih tinggi dari 46,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/simsong/tcpflow/security/advisories/GHSA-q5q6-frrv-9rj6 exploit · mitigasi · advisory vendor
• https://lists.debian.org/debian-lts-announce/2026/02/msg00014.html mailing list · advisory pihak ketiga