DEBIAN-CVE-2026-119600: Medium severity debian/tcpflow vulnerability

Published Oct 30, 2026

Updated

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pcap files to leak adjacent memory into reconstructed flow files or crash tcpflow.

Affected Software

3 affected components

debian/tcpflow*

Event History

Oct 30, 2026

CVE Published

via OSV·02:16 PM

Data Sourced

via OSV·02:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What conditions are required to exploit this issue?

An attacker must be able to inject crafted IPv4 or IPv6 TCP packets into traffic captured by tcpflow, or supply a malicious pcap file for tcpflow to process. The packets use forged IP payload lengths to trigger the out-of-bounds read.

What could an attacker obtain or cause?

The out-of-bounds read may leak adjacent tcpflow process memory into reconstructed flow files. It can also cause tcpflow to crash.

Which deployments are most exposed?

Deployments that process untrusted live network traffic or pcap files are exposed to attacker-controlled packet metadata. Systems that only process trusted captures have a reduced opportunity for an attacker to introduce the crafted packets described.

DEBIAN-CVE-2026-119600: Medium severity debian/tcpflow vulnerability

Affected Software

Event History

Frequently Asked Questions

What conditions are required to exploit this issue?

What could an attacker obtain or cause?

Which deployments are most exposed?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to exploit this issue?

What could an attacker obtain or cause?

Which deployments are most exposed?