Skip to content
OpenAdvisories

Package · Debian

ipfixcol2

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    CESNET ipfixcol2 2.7.1 before 2.9.0 Memory Exhaustion via TCP LZ4 Decoder

    CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes. Attackers can open TCP connections sending LZ4 …