CVE-2019-14459

High

Description

nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).

SeverityHigh
CVSS7.5
Exploit probability86. percentile2.7%
ProductNfdump
PublishedJul 31, 2019
First seenJul 31, 2019

How to fix

Affected products

ProductAffected versionsFixed in
nfdump_project nfdumpv ≤ 1.6.17—
debian debian_linux9.0—
fedoraproject fedora29, 30—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.