Live › vulnerability › CVE-2026-119600
tcpflow, a tool that reconstructs network flows from captured traffic, reads past the end of a buffer when a packet's IP payload length is forged. An attacker who can inject crafted IPv4 or IPv6 TCP packets, or supply a pcap file, can leak adjacent process memory into the flow files or crash the tool.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 14:30 UTC. All times on this page are UTC.
No product ranges from the sources yet.
tcpflow -V and see whether it is 1.6.1 or older.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files to leak adjacent memory into reconstructed flow files or crash tcpflow.
This page as .md · .json · in your agent: get_signal("CVE-2026-119600")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.