CVE-2019-14459

CVE-2019-14459 affects nfdump up to version 1.6.17 and earlier. The issue is an integer overflow in Process_ipfix_template_withdraw (ipfix.c) that can be remotely triggered to crash the process (denial of service). Connected advisories indicate fixes in newer releases: Gentoo GLSA-202003-17 recom...

CVE-2019-1010057

CVE-2019-1010057 affects nfdump up to 1.6.16 (and earlier) with a buffer overflow in nfx.c:546, nffile_inline.c:83, minilzo.c, when parsing a specially crafted netflow/sflow file. Claimed impacts include denial of service and potential local code execution. Remediation across sources includes upg...