CESNET ipfixcol2 memory overflow and exhaustion flaws
A data collection program can be knocked over or tampered with by outside connections.
Summary
Flaws in the TCP input and Forwarder output plugins of CESNET ipfixcol2 let an unauthenticated remote attacker crash the collector or make it use excess memory. Versions 2.7.1 before 2.9.0 and 2.3.0 before 2.9.0 are affected.
Affected when
- TCP input plugin with LZ4 compressed input
- Forwarder output plugin forwarding over TCP
What to do
Update to ipfixcol2 2.9.0.
Products and platforms
CVE IDs
Sources
- Advisory: github.com (opens in a new tab)
- Write-up: github.com (opens in a new tab) · vulncheck.com (opens in a new tab) · vulncheck.com (opens in a new tab) · github.com (opens in a new tab) · vulncheck.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab) · cve.org (opens in a new tab) · cve.org (opens in a new tab)
Times
First published
First seen