Skip to content
OpenAdvisories

Package · Debian

tcpflow

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-119600

    tcpflow < 1.7.0 Out-of-Bounds Read via TCP Demultiplexer Payload Length

    tcpflow before 1.7.0 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into captured traffic or pc…

    simsong tcpflow tcpflow tcpflow Debian Ubuntu
  • Medium 5.5
    CVE-2026-25061

    tcpflow has TIM Element OOB Write in wifipcap

    tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a …

    simsong tcpflow tcpflow tcpflow Debian Ubuntu