FastNetMon Community Edition vulnerabilities

FastNetMon Community Edition through 1.2.9 does not verify TLS certificates on outbound HTTPS connections. The execute_web_request_secure() function fails to call set_verify_mode(verify_peer), so OpenSSL does not validate the server's certificate chain. This function is used for telemetry reporting, sending system information.

In FastNetMon Community Edition up to 1.2.9, an integer overflow in the packet capture buffer allocation function allocate_buffer() leads to a smaller-than-expected buffer and subsequent heap corruption via out-of-bounds writes.

FastNetMon Community Edition through 1.2.9 has an out-of-bounds read vulnerability in the NetFlow v9 data flowset processor. The Data template branch iterates without bounds checking, while the Options template branch does. Since templates are sent via unauthenticated UDP, an attacker can craft templates to read memory past the packet buffer.