Summary
It was discovered that tcpflow incorrectly handled certain malformed network
packets. A remote attacker could send these packets to a target system, causing
tcpflow to crash or possibly disclose sensitive information.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | tcpflow | 1.4.5+repack1-1ubuntu0.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | tcpflow | 1.4.5+repack1-4ubuntu0.18.04.1 |
Vulnerabilities 2
-
Unscored —
An issue was discovered in wifipcap/wifipcap.cpp in TCPFLOW through 1.5.0-alpha. There is an integer overflow in the fu…
-
Unscored —
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causin…