Summary
It was discovered that nfdump incorrectly handled certain input files,
leading to a buffer overflow. If a user or automated system were tricked
into processing a specially crafted file, an attacker could possibly use
this issue to cause nfdump to crash or execute arbitrary code.
(CVE-2019-1010057)
It was discovered that nfdump incorrectly handled certain IPFIX template
withdrawal messages, leading to an integer overflow. A remote attacker
could possibly use this issue to cause nfdump to crash, resulting in a
denial of service. (CVE-2019-14459)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | nfdump | 1.6.16-3ubuntu0.1~esm1 |
Vulnerabilities 2
-
Unscored —
nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of servi…
-
Unscored —
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c…