Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:25577
HistoryJun 03, 2020 - 4:10 a.m.

Denial Of Service (DoS)

2020-06-0304:10:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

0.001 Low

EPSS

Percentile

51.1%

tcpflow is vulnerable to denial of service (DoS). The vulnerability exists as a stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.