Nfdump

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-14459 Jul 31, 21:15 HIGH POC PATCH This Week

nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Integer Overflow Debian Debian Linux Fedora +2

NVD GitHub

CVSS 3.1

7.5

EPSS

2.7%

CVE-2019-1010057 Jul 16, 13:15 HIGH This Week

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service Memory Corruption Debian +4

NVD GitHub

CVSS 3.1

7.8

EPSS

1.7%

CVE-2019-14459

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service Integer Overflow Debian +4

NVD GitHub

CVE-2019-1010057

EPSS 2% CVSS 7.8

HIGH This Week

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Denial Of Service +6

NVD GitHub