CVE-2019-14459: Integer Overflow

Q: What does an attacker need to exploit this issue?

An attacker can trigger the denial of service remotely over the network. No privileges or user interaction are required.

Q: What is the likely impact of successful exploitation?

Successful exploitation can crash the nfdump process, causing a denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.

Q: Which versions should be prioritized for remediation?

nfdump 1.6.17 and earlier are identified as affected. Apply the available patch.

Published Jul 31, 2019

Updated

nfdump 1.6.17 and earlier is affected by an integer overflow in the function Processipfixtemplatewithdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).

Affected Software

5 affected componentsFixes available

debian/nfdump<=1.6.17-1

1.6.22-21.7.1-2+deb12u11.7.3-1

Nfdump Project Nfdump<=1.6.17

Debian Debian Linux=9.0

Fedoraproject Fedora=29

Fedoraproject Fedora=30

Remediation

Patch Available

https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b

Event History

Jul 31, 2019

CVE Published

via MITRE·08:57 PM

Data Sourced

via MITRE·08:57 PM

Description

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker can trigger the denial of service remotely over the network. No privileges or user interaction are required.

What is the likely impact of successful exploitation?

Successful exploitation can crash the nfdump process, causing a denial of service. The provided CVSS vector indicates no confidentiality or integrity impact.

Which versions should be prioritized for remediation?

nfdump 1.6.17 and earlier are identified as affected. Apply the available patch.

CVE-2019-14459: Integer Overflow

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which versions should be prioritized for remediation?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the likely impact of successful exploitation?

Which versions should be prioritized for remediation?