CVE-2019-14459
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2019-14459
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-14459.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2019-14459
- Downstream
- Published
- 2019-07-31T21:15:11Z
- Modified
- 2025-10-21T04:47:15.339431Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Processipfixtemplate_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- References
-
- https://github.com/phaag/nfdump/issues/171
- https://lists.debian.org/debian-lts-announce/2020/09/msg00021.html
- https://security.gentoo.org/glsa/202003-17
- https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTONOGJU5FSMFNRCT6OHXYUMDRKH4RPA/
Affected packages
Git / github.com/phaag/nfdump
Affected ranges
- Type
- GIT
- Repo
- https://github.com/phaag/nfdump
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Database specific
vanir_signatures
[
{
"id": "CVE-2019-14459-28d0cf76",
"source": "https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b",
"signature_version": "v1",
"digest": {
"length": 445.0,
"function_hash": "2566065934500313209064802284287609098"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "Process_ipfix_template_withdraw",
"file": "bin/ipfix.c"
}
},
{
"id": "CVE-2019-14459-9ed48c63",
"source": "https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b",
"signature_version": "v1",
"digest": {
"length": 4554.0,
"function_hash": "255931474877025429624093994592633441352"
},
"deprecated": false,
"signature_type": "Function",
"target": {
"function": "Process_ipfix_template_add",
"file": "bin/ipfix.c"
}
},
{
"id": "CVE-2019-14459-d0710105",
"source": "https://github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9b",
"signature_version": "v1",
"digest": {
"line_hashes": [
"61093887762454218481233648391296405957",
"59834892523595629546671054081810919351",
"278423574008120186746432230498105753055",
"234917007496416288369355897334790062791",
"119039669925299467230396952435174491989",
"194799690917280427686831918636223352098",
"169117545355776012287811733532588520142"
],
"threshold": 0.9
},
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "bin/ipfix.c"
}
}
]