{"id":"CVE-2025-46836","aliases":["AZL-61883","AZL-61888","DEBIAN-CVE-2025-46836","DLA-4202-1","DSA-5923-1","EUVD-2025-14945","GHSA-pfwf-h6m3-63wf","MGASA-2025-0259","SUSE-SU-2025:02974-1","SUSE-SU-2025:03245-1","SUSE-SU-2025:03260-1","SUSE-SU-2025:20566-1","SUSE-SU-2025:20747-1","SUSE-SU-2025:20825-1","SUSE-SU-2026:20940-1","SUSE-SU-2026:20948-1","UBUNTU-CVE-2025-46836","USN-7537-1","openSUSE-SU-2025:15428-1","openSUSE-SU-2026:20437-1"],"status":"published","title":"net-tools Stack-based Buffer Overflow vulnerability","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00208,"percentile":0.11022,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-121","CWE-20"],"published":"2025-05-14T22:59:19Z","modified":"2026-11-05T05:40:51Z","fixes":[{"ecosystem":"Azure Linux:2","package":"net-tools","fixed_in":["2.10-4"],"sources":["osv"]},{"ecosystem":"Azure Linux:3","package":"net-tools","fixed_in":["2.10-4"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"net-tools","fixed_in":["2.10-0.1+deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"net-tools","fixed_in":["2.10-1.2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"net-tools","fixed_in":["2.10-1.2"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"net-tools","fixed_in":["1.60+git20181103.0eebece-1+deb11u2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"net-tools","fixed_in":["2.10-1.1.mga9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"net-tools","fixed_in":["1.60-765.12.1","1.60-765.15.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"net-tools","fixed_in":["2.0+git20170221.479bb4a-150000.5.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"net-tools","fixed_in":["2.10-3.1","2.10-4.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.1","package":"net-tools","fixed_in":["2.10-slfo.1.1_2.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"net-tools","fixed_in":["2.10-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"net-tools","fixed_in":["2.10-160000.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.2","package":"net-tools","fixed_in":["2.10-160000.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"net-tools","fixed_in":["1.60+git20180626.aebd88e-1ubuntu1.3","1.60+git20180626.aebd88e-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"net-tools","fixed_in":["1.60+git20181103.0eebece-1ubuntu5.4","1.60+git20181103.0eebece-1ubuntu5.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"net-tools","fixed_in":["2.10-0.1ubuntu4.4","2.10-0.1ubuntu4.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:25.10","package":"net-tools","fixed_in":["2.10-1.3ubuntu1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"net-tools","fixed_in":["2.10-4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"net-tools","fixed_in":["2.10-160000.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-0.1+deb12u1"}]}],"versions":["2.10-0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.2"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60+git20181103.0eebece-1+deb11u2"}]}],"versions":["1.60+git20181103.0eebece-1","1.60+git20181103.0eebece-1+deb11u1"]},{"source":"osv","ecosystem":"Debian:12","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-0.1+deb12u1"}]}],"versions":["2.10-0.1"]},{"source":"osv","ecosystem":"Mageia:9","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.1.mga9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-765.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60-765.15.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP6","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP7","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0+git20170221.479bb4a-150000.5.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-slfo.1.1_2.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP applications 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.2","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.60-25ubuntu1","1.60-25ubuntu2","1.60-25ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.60-26ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.60+git20161116.90da8a0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60+git20180626.aebd88e-1ubuntu1.3"}]}],"versions":["1.60+git20180626.aebd88e-1ubuntu1","1.60+git20180626.aebd88e-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60+git20181103.0eebece-1ubuntu5.4"}]}],"versions":["1.60+git20181103.0eebece-1ubuntu2","1.60+git20181103.0eebece-1ubuntu3","1.60+git20181103.0eebece-1ubuntu4","1.60+git20181103.0eebece-1ubuntu5","1.60+git20181103.0eebece-1ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-0.1ubuntu4.4"}]}],"versions":["2.10-0.1ubuntu3","2.10-0.1ubuntu4","2.10-0.1ubuntu4.1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.3ubuntu1"}]}],"versions":["2.10-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60+git20180626.aebd88e-1ubuntu1.1"}]}],"versions":["1.60+git20180626.aebd88e-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.60+git20181103.0eebece-1ubuntu5.1"}]}],"versions":["1.60+git20181103.0eebece-1ubuntu2","1.60+git20181103.0eebece-1ubuntu3","1.60+git20181103.0eebece-1ubuntu4","1.60+git20181103.0eebece-1ubuntu5"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-0.1ubuntu4.1"}]}],"versions":["2.10-0.1ubuntu3","2.10-0.1ubuntu4"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"net-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-160000.3.1"}]}]}],"products":[{"vendor":"ecki","product":"net-tools"},{"vendor":"siemens","product":"ruggedcom rox mx5000"},{"vendor":"siemens","product":"ruggedcom rox mx5000re"},{"vendor":"siemens","product":"ruggedcom rox rx1400"},{"vendor":"siemens","product":"ruggedcom rox rx1500"},{"vendor":"siemens","product":"ruggedcom rox rx1501"},{"vendor":"siemens","product":"ruggedcom rox rx1510"},{"vendor":"siemens","product":"ruggedcom rox rx1511"},{"vendor":"siemens","product":"ruggedcom rox rx1512"},{"vendor":"siemens","product":"ruggedcom rox rx1524"},{"vendor":"siemens","product":"ruggedcom rox rx1536"},{"vendor":"siemens","product":"ruggedcom rox rx5000"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://github.com/ecki/net-tools/security/advisories/GHSA-pfwf-h6m3-63wf","tags":["x_refsource_CONFIRM","advisory","report"]},{"url":"https://github.com/ecki/net-tools/commit/7a8f42fb20013a1493d8cae1c43436f85e656f2d","tags":["x_refsource_MISC","fix"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00053.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-082556.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-577017.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-46836","tags":["web","advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46836.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-46836","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0259.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34295","tags":["report"]},{"url":"https://lists.debian.org/debian-security-announce/2025/msg00086.html","tags":["web"]},{"url":"https://ubuntu.com/security/notices/USN-7537-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-7537-2","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502974-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1243581","tags":["report"]},{"url":"https://bugzilla.suse.com/1246608","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-46836","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503245-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1248410","tags":["report"]},{"url":"https://bugzilla.suse.com/1248687","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202503260-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/142461","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520566-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520747-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/430864","tags":["report"]},{"url":"https://bugzilla.suse.com/544339","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202520825-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620940-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202620948-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2025-46836","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-46836","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-46836","title":"net-tools Stack-based Buffer Overflow vulnerability","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T22:59:19.997Z","modified":"2026-10-15T01:09:12.374Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20","CWE-121"],"updated_at":"2026-11-02T14:32:36.706507Z"}],"euvd":[{"id":"EUVD-2025-14945","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T22:59:19Z","modified":"2026-10-15T01:09:12Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:06.951216Z"}],"nvd":[{"id":"CVE-2025-46836","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T23:15:48.073Z","modified":"2026-06-17T09:27:00.64Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20","CWE-121"],"updated_at":"2026-11-02T14:11:08.321805Z"}],"osv":[{"id":"CVE-2025-46836","title":"net-tools Stack-based Buffer Overflow vulnerability","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T22:59:19.997Z","modified":"2026-10-28T11:01:49.460062737Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"cwes":["CWE-121","CWE-20"],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"DEBIAN-CVE-2025-46836","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T23:15:48.073Z","modified":"2026-09-01T20:03:35.208359081Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:47.378563Z"},{"id":"UBUNTU-CVE-2025-46836","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T23:15:00Z","modified":"2026-02-04T04:12:08.998319Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:55:50.31802Z"},{"id":"AZL-61883","title":"CVE-2025-46836 affecting package net-tools for versions less than 2.10-4","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T23:15:48Z","modified":"2026-04-21T04:31:52.78885Z","updated_at":"2026-11-02T15:28:07.805289Z"},{"id":"AZL-61888","title":"CVE-2025-46836 affecting package net-tools for versions less than 2.10-4","description":"net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.","status":"published","published":"2025-05-14T23:15:48Z","modified":"2026-11-05T05:40:51Z","updated_at":"2026-11-05T16:41:21.518778Z"},{"id":"DLA-4202-1","title":"net-tools - security update","status":"published","published":"2025-05-31T00:00:00Z","modified":"2026-03-09T01:01:49.819624Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"DSA-5923-1","title":"net-tools - security update","status":"published","published":"2025-05-18T00:00:00Z","modified":"2026-03-09T02:08:49.540741Z","updated_at":"2026-11-02T15:46:18.296714Z"},{"id":"MGASA-2025-0259","title":"Updated net-tools packages fix security vulnerability","description":"net-tools Stack-based Buffer Overflow vulnerability. (CVE-2025-46836)\n","status":"published","published":"2025-11-05T22:49:51Z","modified":"2026-04-16T04:41:49.264756285Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:15428-1","title":"net-tools-2.10-4.1 on GA media","description":"These are all security issues fixed in the net-tools-2.10-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-08-09T00:00:00Z","modified":"2026-03-23T04:53:46.0041Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:20437-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58).\n- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59).\n- Avoid unsafe memcpy in ifconfig (bsc#1248687).\n- Prevent overflow in ax25 and netrom (bsc#1248687)\n- Keep possibility to enter long interface names, even if they are\n  not accepted by the kernel, because it was always possible up to\n  CVE-2025-46836 fix. But issue a warning about an interface name\n  concatenation (bsc#1248410).\n","status":"published","published":"2026-03-26T15:12:43Z","modified":"2026-04-03T17:25:54.085284Z","updated_at":"2026-11-02T16:58:41.463445Z"},{"id":"SUSE-SU-2025:02974-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- CVE-2025-46836: Fixed absence of bound check that might lead to a stack buffer overflow (bsc#1243581)\n","status":"published","published":"2025-08-25T09:23:53Z","modified":"2026-03-23T04:46:57.205735Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03245-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\nSecurity issues fixed:\n\n- Avoid unsafe use of `memcpy` in `ifconfig` (bsc#1248687).    \n- Prevent overflow in `ax25` and `netrom` (bsc#1248687).   \n- Fix stack buffer overflow in `parse_hex` (bsc#1248687).\n- Fix stack buffer overflow in `proc_gen_fmt` (bsc#1248687).\n\nOther issues fixed:\n\n- Allow use of long interface names after CVE-2025-46836 fix, even if they are not accepted by the kernel (bsc#1248410).\n","status":"published","published":"2025-09-17T10:55:16Z","modified":"2026-02-04T04:13:41.567268Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:03260-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-46836: missing bounds check in `get_name` may lead to a stack buffer overflow (bsc#1243581).\n- Avoid unsafe use of `memcpy` in `ifconfig` (bsc#1248687).    \n- Prevent overflow in `ax25` and `netrom` (bsc#1248687).   \n- Fix stack buffer overflow in `parse_hex` (bsc#1248687).\n- Fix stack buffer overflow in `proc_gen_fmt` (bsc#1248687).\n    \nOther issues fixed:\n\n- Allow use of long interface names after CVE-2025-46836 fix, even if they are not accepted by the kernel (bsc#1248410).\n- Fix netrom support.\n","status":"published","published":"2025-09-18T00:09:50Z","modified":"2026-02-04T04:19:38.255844Z","updated_at":"2026-11-02T15:53:57.111474Z"},{"id":"SUSE-SU-2025:20566-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Provide more readable error for interface name size checking (bsc#1243581)\n\n- Perform bound checks when parsing interface labels in\n  /proc/net/dev (bsc#1243581, bsc#1246608. CVE-2025-46836)\n","status":"published","published":"2025-08-21T08:01:27Z","modified":"2026-03-23T04:48:59.691896Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20747-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Fixed stack buffer overflow in parse_hex, proc_gen_fmt, ax25 and netrom (bsc#1248687)\n- CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks (bsc#1243581)\n","status":"published","published":"2025-09-16T06:28:45Z","modified":"2026-03-23T04:49:03.639039Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2025:20825-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Fixed stack buffer overflow in parse_hex, proc_gen_fmt, ax25 and netrom (bsc#1248687)\n- Fixed stack overflow in ax25 and netrom (bsc#1248687)\n- CVE-2025-46836: Fixed stack buffer overflow caused by the absence of bound checks (bsc#1243581)\n","status":"published","published":"2025-09-26T09:29:17Z","modified":"2026-03-23T04:47:19.470245Z","updated_at":"2026-11-02T15:53:59.92114Z"},{"id":"SUSE-SU-2026:20940-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58).\n- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59).\n- Avoid unsafe memcpy in ifconfig (bsc#1248687).\n- Prevent overflow in ax25 and netrom (bsc#1248687)\n- Keep possibility to enter long interface names, even if they are\n  not accepted by the kernel, because it was always possible up to\n  CVE-2025-46836 fix. But issue a warning about an interface name\n  concatenation (bsc#1248410).\n","status":"published","published":"2026-03-26T15:12:29Z","modified":"2026-04-02T17:25:03.346885Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"SUSE-SU-2026:20948-1","title":"Security update for net-tools","description":"This update for net-tools fixes the following issues:\n\n- Fix stack buffer overflow in parse_hex (bsc#1248687, GHSA-h667-qrp8-gj58).\n- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687, GHSA-w7jq-cmw2-cq59).\n- Avoid unsafe memcpy in ifconfig (bsc#1248687).\n- Prevent overflow in ax25 and netrom (bsc#1248687)\n- Keep possibility to enter long interface names, even if they are\n  not accepted by the kernel, because it was always possible up to\n  CVE-2025-46836 fix. But issue a warning about an interface name\n  concatenation (bsc#1248410).\n","status":"published","published":"2026-03-26T15:12:29Z","modified":"2026-04-02T17:25:27.994494Z","updated_at":"2026-11-02T15:54:01.953589Z"},{"id":"USN-7537-1","title":"net-tools vulnerability","description":"It was discovered that net-tools incorrectly handled certain inputs.\nAn attacker could possible use this issue to cause a crash or execute\narbitrary code.\n","status":"published","published":"2025-05-27T17:12:39Z","modified":"2026-04-27T18:01:53.509777Z","updated_at":"2026-11-02T16:58:19.988474Z"}]}}