tcpflow vulnerabilities

CVEs whose affected-version data names the tcpflow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119600Medium· 4.8

1w ago

tcpflow through 1.6.1 Out-of-Bounds Read via TCP Demultiplexer Payload Length

tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with forged IP payload lengths. Attackers can inject crafted IPv4 or IPv6 TCP packets into…

▾ Sunlitsimsong · tcpflowEPSS 0.37%via CVEORG