CVE-2022-2529: Multiple DoS Attack Vectors in sflow packet handling
Impact The sflow decode package prior to version 3.4.4 does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume huge amounts of memory resulting in a denial of service.
Specific Go Packages Affected github.com/cloudflare/goflow/v3/decoders/sflow
Patches Version 3.4.4 contains patches fixing this.
Workarounds A possible workaround is to not have your goflow collector publicly reachable.
For more information If you have any questions or comments about this advisory: Open an issue in goflow repo Email us [netdev[@]cloudflare.com ](mailto:netdev@cloudflare.com)
Other sources
sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume large amounts of memory resulting in a denial of service.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-2529 vulnerability?
CVE-2022-2529 is a vulnerability in the sflow decode package prior to version 3.4.4 that can be exploited to launch a denial of service attack by sending malicious packets, leading to excessive memory consumption.
How does the CVE-2022-2529 vulnerability impact the affected software?
The CVE-2022-2529 vulnerability can cause the affected software to consume significant amounts of memory, resulting in a denial of service, if it receives crafted and malformed packets.
What is the severity of CVE-2022-2529 vulnerability?
CVE-2022-2529 has a severity rating of 7.5 (high).
Which software is affected by the CVE-2022-2529 vulnerability?
The CVE-2022-2529 vulnerability affects the sflow decode package prior to version 3.4.4 and Cloudflare Goflow.
How can I mitigate the CVE-2022-2529 vulnerability?
To mitigate the CVE-2022-2529 vulnerability, update the sflow decode package to version 3.4.4 or higher.