Product
debian/net-tools vulnerabilities
5 published CVES affecting debian/net-tools, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 1
- Unscored
- 3
- CISA KEV
- 0
Latest debian/net-tools CVEs
Newest publication first
-
Unknown
-
DSA-5923-2 net-tools - regression update
PublishedUnknown -
DSA-5923-1 net-tools - security update
PublishedUnknown -
MediumCVSS 6.6 EPSS 0.21%
net-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure o...
-
LowCVSS 2.1 EPSS 0.40%
ifconfig, when used on the Linux kernel 2.2 and later, does not report when the network interface is in promiscuous mode if it was put in promiscuous mode using PACKET_MR_PROMISC, which could allow attackers to sniff the network without detection, as demonstrated using libpcap.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.