FastNetMon Community Edition through 1.2.9 has out-of-bounds memory access because it incorrectly parses BGP path attributes with the extended length flag set. In src/bgp_protocol.hpp, the parse_raw_bgp_attribute() function correctly identifies when extended_length_bit is set and sets length_of_length_field to 2, but then reads only a single byte for the attribute value length (attribute_value_length = value[2] at line 173). Per RFC 4271 Section 4.3, when the Extended Length bit is set, the Attribute Length field is two octets and the value should be read as a 16-bit big-endian integer from value[2] and value[3]. As a result, any attribute longer than 255 bytes has its length silently truncated to the low byte (e.g., 300 bytes = 0x012C is read as 0x2C = 44 bytes). The remaining 256 bytes are then misinterpreted as subsequent attributes, causing cascading parse failures and potential out-of-bounds memory access.
FastNetMon Community Edition through 1.2.9 contains an out-of-bounds memory access vulnerability in BGP path attribute parsing where extended length flags are incorrectly handled, reading only one byte instead of two for attribute lengths. This causes attributes longer than 255 bytes to be truncated, leading to memory corruption and potential denial of service.
يحتوي FastNetMon Community Edition على خلل في دالة parse_raw_bgp_attribute() حيث يتم قراءة بايت واحد فقط بدلاً من بايتين عند تعيين علم الطول الممتد. يؤدي هذا إلى اقتطاع الخصائص الأطول من 255 بايت وسوء تفسير البيانات المتبقية كخصائص لاحقة.
FastNetMon Community Edition through 1.2.9 contains an out-of-bounds memory access vulnerability in BGP path attribute parsing where extended length flags are incorrectly handled, reading only one byte instead of two for attribute lengths. This causes attributes longer than 255 bytes to be truncated, leading to memory corruption and potential denial of service.
Update FastNetMon Community Edition to version 1.3.0 or later. Implement input validation for BGP path attributes with extended length flags. Apply RFC 4271 compliant parsing logic that correctly reads 16-bit big-endian integers for extended length attribute values. Monitor BGP traffic for malformed attributes and implement rate limiting on BGP updates.
قم بتحديث FastNetMon Community Edition إلى الإصدار 1.3.0 أو أحدث. قم بتنفيذ التحقق من صحة المدخلات لخصائص مسار BGP مع أعلام الطول الممتد. طبق منطق المعالجة المتوافق مع RFC 4271 الذي يقرأ بشكل صحيح أعداد صحيحة بطول 16 بت بترتيب البايت الكبير. راقب حركة BGP للبحث عن خصائص مشوهة وقم بتنفيذ تحديد معدل على تحديثات BGP.