USN-9079-1: nfdump vulnerabilities
It was discovered that nfdump incorrectly handled certain input files, leading to a buffer overflow. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause nfdump to crash or execute arbitrary code. (CVE-2019-1010057) It was discovered that nfdump incorrectly handled certain IPFIX template withdrawal messages, leading to an integer overflow. A remote attacker could possibly use this issue to cause nfdump to crash, resulting in a denial of service. (CVE-2019-14459)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/nfdumpto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/nfdump-flow-toolsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/nfdump-sflowto a version that resolves this vulnerability.Fixed in Ubuntu Pro
Event History
Frequently Asked Questions
Who is exposed to the buffer-overflow issue?
Users or automated systems that process specially crafted input files with nfdump are exposed. Successful exploitation could cause a crash or potentially execute arbitrary code.
What does an attacker need to exploit the denial-of-service issue?
A remote attacker needs to send IPFIX template withdrawal messages that trigger the integer overflow. This can cause nfdump to crash, resulting in denial of service.