# CVE-2025-46836: net-tools stack buffer overflow in get_name function

Source: https://junglewise.ai/threats/cve-2025-46836-net-tools-stack-buffer-overflow-in-get-name-function  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-05-14. Updated: 2026-05-12  
License: CC BY 4.0 with a link back

CVE-2025-46836 · Severity: medium · CVSS 6.6 · Published 2025-05-14

A vulnerability has been identified in net-tools, a standard set of Linux networking utilities like ifconfig. These tools are used to manage and display network interface information on Linux systems. An attacker with local access could exploit this flaw to cause a system crash or potentially execute unauthorized code, which could disrupt operations or compromise the integrity of the affected device. This issue also impacts certain Siemens industrial controllers and Ruggedcom networking devices that utilize these Linux utilities.

Technologies: [Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP](https://junglewise.ai/threats/technologies/simatic-s7-1500-cpu-1518-4-pn-dp-mfp). Vendors: [Linux Foundation](https://junglewise.ai/threats/vendors/linux-foundation), [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2025-46836 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-46836 being exploited in the wild.

**How severe is CVE-2025-46836?** Medium severity, with a CVSS score of 6.6, published 14 May 2025.

**Which products and versions are affected?** Linux Foundation Net-Tools <= 2.10; Siemens Ruggedcom Rox < 2.17.1; Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP >= V3.1.5.

**Is there a fix for CVE-2025-46836?** A patch was published on 2025-05-31: Debian LTS update released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2025-46836 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-2025-46836?** Check whether you run Linux Foundation Net-Tools, Siemens Ruggedcom Rox or Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow exists in the get_name() function within interface.c of the net-tools package (versions <= 2.10). The vulnerability is caused by improper validation of interface labels read from /proc/net/dev, where labels longer than 15 bytes are copied into a fixed 16-byte stack buffer (IFNAMSIZ) without bounds checking. An attacker with local access can trigger this by manipulating the /proc filesystem (e.g., via unprivileged user namespaces) to include a malformed interface name. Successful exploitation can lead to arbitrary code execution or a denial-of-service (crash), though it does not inherently provide privilege escalation. A fix is available in net-tools version 2.20 and has been backported to various Linux distributions.

## Affected products

- Linux Foundation net-tools <= 2.10
- Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP >= V3.1.5
- Siemens Ruggedcom Rox < 2.17.1

## Timeline

- 2025-05-14: disclosed: Initial disclosure and GitHub advisory published
- 2025-05-14: advisory
- 2025-05-31: patched: Debian LTS update released
- 2026-05-12: advisory: Siemens security advisory updated to include this CVE

## References

- [https://github.com/ecki/net-tools/commit/7a8f42fb20013a1493d8cae1c43436f85e656f2d](https://github.com/ecki/net-tools/commit/7a8f42fb20013a1493d8cae1c43436f85e656f2d)
- [https://github.com/ecki/net-tools/security/advisories/GHSA-pfwf-h6m3-63wf](https://github.com/ecki/net-tools/security/advisories/GHSA-pfwf-h6m3-63wf)
- [https://lists.debian.org/debian-lts-announce/2025/05/msg00053.html](https://lists.debian.org/debian-lts-announce/2025/05/msg00053.html)
- [https://cert-portal.siemens.com/productcert/html/ssa-082556.html](https://cert-portal.siemens.com/productcert/html/ssa-082556.html)
- [https://cert-portal.siemens.com/productcert/html/ssa-577017.html](https://cert-portal.siemens.com/productcert/html/ssa-577017.html)

## Related threats

- [Linux Kernel denial of service in IPv6 tunneled traffic handling](https://junglewise.ai/threats/cve-2026-43057-linux-kernel-denial-of-service-in-ipv6-tunneled-traffic-handling)
- [Linux Kernel information leak in IPv6 ndisc nduseroptmsg](https://junglewise.ai/threats/cve-2026-43040-linux-kernel-information-leak-in-ipv6-ndisc-nduseroptmsg)
- [Linux kernel information leak in tc_chain_fill_node](https://junglewise.ai/threats/cve-2026-43035-linux-kernel-information-leak-in-tc-chain-fill-node)
- [Linux Kernel memory corruption in crypto authencesn decryption](https://junglewise.ai/threats/cve-2026-43033-linux-kernel-memory-corruption-in-crypto-authencesn-decryption)
- [Linux Kernel BPF verifier incorrect state pruning in regsafe](https://junglewise.ai/threats/cve-2026-43030-linux-kernel-bpf-verifier-incorrect-state-pruning-in-regsafe)