#tcpflow
[Backport release-26.05] tcpflow: fix IP payload length out-of-bounds read

https://github.com/NixOS/nixpkgs/pull/582722

#security
November 3, 2026 at 10:03 PM
November 3, 2026 at 3:32 PM
🚨 EUVD-2026-113937
📊 6.3/10
🏢 simsong

📝 tcpflow through 1.6.1 contains an out-of-bounds read vulnerability that allows unauthenticated attackers to read process memory by sending packets with ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113937

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 3:02 PM
Comparison of tools that extract files from #pcap
:neocat_book: Chaosreader
⛏️ NetworkMiner
🐿️ Suricata
🫗 tcpflow
🦈 Wireshark
👁️ Zeek
https://netresec.com/?b=255329f
@netresec
netresec.com
May 5, 2025 at 4:13 PM
CVE-2026-25061 - tcpflow has TIM Element OOB Write in wifipcap
CVE ID : CVE-2026-25061

Published : Jan. 29, 2026, 9:42 p.m. | 24 minutes ago

Description : tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management fr...
CVE-2026-25061 - tcpflow has TIM Element OOB Write in wifipcap
tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check on the wrong field when handling the TIM element. A crafted frame with a large TIM length can cause a 1-byte out-of-bounds write past `tim.bitmap[251]`. The …
cvefeed.io
January 29, 2026 at 11:27 PM
Security updates for Wednesday Security updates have been issued by Debian (kernel, linux-6.1, munge, and tcpflow), Fedora (accel-ppp, atuin, babl, bustle, endless-sky, envision, ettercap, fapolicy...

Origin | Interest | Match
Security updates for Wednesday [LWN.net]
lwn.net
February 11, 2026 at 2:04 PM
🚨 EUVD-2026-4944
📊 5.5/10
🏢 simsong

📝 tcpflow is a TCP/IP packet demultiplexer. In versions up to and including 1.61, wifipcap parses 802.11 management frame elements and performs a length check...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4944

#cybersecurity #infosec #cve #euvd
January 29, 2026 at 10:35 PM
The tcpflow security patch for #Fedora 42 (2026-2f6fa1b6a1) addresses a heap overflow in TCP stream reassembly – a zero-click RCE vector for network monitoring stacks. Enterprise deployment window: 72 hours. Read more: 👉 tinyurl.com/yrs2j9w7 #Security
Tcpflow Fedora 42 Security Patch (2026-2f6fa1b6a1): Enterprise-Grade Vulnerability Analysis & Mitigation Strategy
Blog com notícias sobre, Linux, Android, Segurança , etc
tinyurl.com
April 4, 2026 at 5:49 PM
Re-implemented something very similar to `tcpflow` using python in basically one sitting today. I wanted to output bidirectional traffic to pcapng files with raw IP link type.
May 9, 2023 at 9:46 PM
[25.11] tcpflow: 1.6.1 -> 1.6.1-unstable-2026-01-29

https://github.com/NixOS/nixpkgs/pull/492081

#security
February 19, 2026 at 10:07 PM
Security updates for Wednesday
Security updates have been issued by **Debian** (kernel, linux-6.1, munge, and tcpflow), **Fedora** (accel-ppp, atuin, babl, bustle, endless-sky, envision, ettercap, fapolicy-analyzer, firefox, glycin, gnome-settings-daemon, go-fdo-client, greenboot-rs, greetd, helix, hwdata, keylime-agent-rust, kiwi, libdrm, maturin, mirrorlist-server, ntpd-rs, ogr2osm, open-vm-tools, perl-App-Cme, perl-Net-RDAP, perl-rdapper, polymake, python-requests-ratelimiter, python-tqdm, rust-add-determinism, rust-afterburn, rust-ambient-id, rust-app-store-connect, rust-bat, rust-below, rust-btrd, rust-busd, rust-bytes, rust-cargo-c, rust-cargo-deny, rust-coreos-installer, rust-crypto-auditing-agent, rust-crypto-auditing-client, rust-crypto-auditing-event-broker, rust-crypto-auditing-log-parser, rust-dua-cli, rust-eif_build, rust-git-delta, rust-git-interactive-rebase-tool, rust-git2, rust-gst-plugin-dav1d, rust-gst-plugin-reqwest, rust-heatseeker, rust-ingredients, rust-jsonwebtoken, rust-lsd, rust-monitord, rust-monitord-exporter, rust-muvm, rust-nu, rust-num-conv, rust-onefetch, rust-oo7-cli, rust-pleaser, rust-pore, rust-pretty-git-prompt, rust-procs, rust-rbspy, rust-rbw, rust-rd-agent, rust-rd-hashd, rust-redlib, rust-resctl-bench, rust-resctl-demo, rust-routinator, rust-sccache, rust-scx_layered, rust-scx_rustland, rust-scx_rusty, rust-sequoia-chameleon-gnupg, rust-sequoia-keystore-server, rust-sequoia-octopus-librnp, rust-sequoia-sq, rust-sevctl, rust-shadow-rs, rust-sigul-pesign-bridge, rust-speakersafetyd, rust-tealdeer, rust-time, rust-time-core, rust-time-macros, rust-tokei, rust-weezl, rust-wiremix, rust-ybaas, rustup, sad, strawberry, systemd, tbtools, transmission, trustedqsl, tuigreet, uv, and vdr-extrecmenung), **Oracle** (brotli, git-lfs, java-1.8.0-openjdk, kernel, libsoup, libsoup3, nodejs:24, python3.12, and thunderbird), **Red Hat** (fence-agents, python-urllib3, python3.11-urllib3, python3.12-urllib3, and resource-agents), **SUSE** (avahi, cups, freerdp, golang-github-prometheus-prometheus, java-11-openjdk, java-17-openjdk, libsoup2, libxml2, and python-pip), and **Ubuntu** (expat, glib2.0, and imagemagick).
lwn.net
February 11, 2026 at 10:00 PM
A new AI review! simsong/tcpflow ⭐3.2/5.0
`tcpflow` is a mature, widely used TCP stream reassembly and extraction tool aimed at protocol analysis and digital forensics.
https://gitrated.com/simsong/tcpflow
March 23, 2026 at 9:04 AM
I used tcpflow to analyse the transferred data and it doesn't seem to be transmitting anything but versions of software and programmer firmware versions. Phew! 😅
May 2, 2025 at 4:08 PM
Tcpdump + tcpflow and probably socat can come handy :)
November 16, 2024 at 9:15 PM