HIGH 7.1 NVD

CVE-2026-111734

P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the PROFINET Frame

P-Net before 1.0.3 does not validate the length of a received Ethernet frame in pf_eth_recv() before reading the EtherType, any VLAN tags and the PROFINET FrameID. The VLAN tag loop had no upper bound, so a truncated frame, or a frame consisting only of VLAN tags, makes the function read past the end of the receive buffer. This can cause a crash (denial of service) or disclose memory content.

References

https://rt-labs.com/wp-content/uploads/2026/10/RRTL-261019-01.pdf

Published: 2026-10-29 · Source: NVD · Feed updated: 2026-10-29

This high severity vulnerability with a CVSS score of 7.1 was published on 2026-10-29 via NVD.

vulnfeed aggregates 16884 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.