CVE-2026-92694

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-92694", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-09-16T16:22:31.541Z", "datePublished": "2026-11-05T22:29:26.943Z", "dateUpdated": "2026-11-09T17:41:09.393Z"}, "containers": {"cna": {"title": "FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts", "problemTypes": [{"descriptions": [{"cweId": "CWE-362", "lang": "en", "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h"}, {"name": "https://github.com/pavel-odintsov/fastnetmon/pull/1087", "tags": ["x_refsource_MISC"], "url": "https://github.com/pavel-odintsov/fastnetmon/pull/1087"}, {"name": "https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381", "tags": ["x_refsource_MISC"], "url": "https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381"}], "affected": [{"vendor": "pavel-odintsov", "product": "fastnetmon", "versions": [{"version": "<= 1.2.9", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T22:29:26.943Z"}, "descriptions": [{"lang": "en", "value": "FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw_table_ipv6() in src/fastnetmon_logic.cpp iterates ipv6_host_counters.average_speed_map without holding counter_map_mutex while recalculate_speed() inserts new keys and may rehash the same map. The race requires networks_list to include the targeted IPv6 range. It causes confirmed undefined behavior under load; a process crash is plausible but was not observed, so reliable denial of service has not been established. No fixed release is available as of this review."}], "source": {"advisory": "GHSA-phrw-2q76-5m7h", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T17:36:16.826474Z", "id": "CVE-2026-92694", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:41:09.393Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-92694", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-09T17:36:16.826474Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T17:36:18.562Z"}}], "cna": {"title": "FastNetMon: IPv6 host counters map iterated without lock, racing concurrent inserts", "source": {"advisory": "GHSA-phrw-2q76-5m7h", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "pavel-odintsov", "product": "fastnetmon", "versions": [{"status": "affected", "version": "<= 1.2.9"}]}], "references": [{"url": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h", "name": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/pavel-odintsov/fastnetmon/pull/1087", "name": "https://github.com/pavel-odintsov/fastnetmon/pull/1087", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381", "name": "https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw_table_ipv6() in src/fastnetmon_logic.cpp iterates ipv6_host_counters.average_speed_map without holding counter_map_mutex while recalculate_speed() inserts new keys and may rehash the same map. The race requires networks_list to include the targeted IPv6 range. It causes confirmed undefined behavior under load; a process crash is plausible but was not observed, so reliable denial of service has not been established. No fixed release is available as of this review."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-362", "description": "CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T22:29:26.943Z"}}}, "cveMetadata": {"cveId": "CVE-2026-92694", "state": "PUBLISHED", "dateUpdated": "2026-11-09T17:41:09.393Z", "dateReserved": "2026-09-16T16:22:31.541Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T22:29:26.943Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "fastnetmon", "vendor": "pavel-odintsov", "versions": [{"status": "affected", "version": "<= 1.2.9"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "FastNetMon is a high-performance DDoS detector and sensor. In version 1.2.9 and earlier, FastNetMon's IPv6 top-talkers screen-draw thread in draw_table_ipv6() in src/fastnetmon_logic.cpp iterates ipv6_host_counters.average_speed_map without holding counter_map_mutex while recalculate_speed() inserts new keys and may rehash the same map. The race requires networks_list to include the targeted IPv6 range. It causes confirmed undefined behavior under load; a process crash is plausible but was not observed, so reliable denial of service has not been established. No fixed release is available as of this review."}], "id": "CVE-2026-92694", "lastModified": "2026-11-09T18:17:35.120", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-92694", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T17:36:16.826474Z", "version": "2.0.3"}}]}, "published": "2026-11-05T23:17:02.110", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381"}, {"source": "security-advisories@github.com", "url": "https://github.com/pavel-odintsov/fastnetmon/pull/1087"}, {"source": "security-advisories@github.com", "url": "https://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-362"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "fastnetmon: FastNetMon: Denial of Service via race condition in IPv6 traffic monitoring", "id": "2567966", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567966"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-366", "details": ["A flaw was found in FastNetMon. A remote attacker could trigger a race condition\u2014a timing conflict where multiple operations access shared data simultaneously\u2014resulting in a Denial of Service (DoS). When processing network traffic within monitored IPv6 ranges, the application updates internal traffic statistics at the same time as screen updates occur without adequate synchronization locking. Under heavy traffic conditions, this unsynchronized access can cause data corruption and potentially crash the monitoring service."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-92694", "public_date": "2026-11-05T22:29:26Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-92694\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92694\nhttps://github.com/pavel-odintsov/fastnetmon/commit/1294724ea931dc78fe545360f2193398bba35381\nhttps://github.com/pavel-odintsov/fastnetmon/pull/1087\nhttps://github.com/pavel-odintsov/fastnetmon/security/advisories/GHSA-phrw-2q76-5m7h"], "statement": "This vulnerability is evaluated as having a Moderate impact because triggering the race condition requires specific administrative configuration to monitor IPv6 network segments alongside heavy concurrent traffic, and exploitation leads to undefined state rather than confirmed service crashes or elevated privileges. Additionally, the flaw is confined to the interactive terminal visualizer rather than core traffic interception routines. FastNetMon is not distributed or supported as part of Red Hat Enterprise Linux, minimizing direct exposure for Red Hat environments.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.2.9]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "fastnetmon", "source": "cna", "vendor": "pavel-odintsov"}, "product": "fastnetmon", "vendor": "pavel-odintsov"}], "created": "2026-11-05T23:45:07.419413+00:00", "updated": "2026-11-06T15:00:07.992546+00:00", "vendors": ["pavel-odintsov", "pavel-odintsov$PRODUCT$fastnetmon"]}