Denial Of Service (DoS)

2022-10-0306:06:10

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

decodetemplateset

dos

netflow.go

sflow packets

memory consumption

application crash

cloudflare

github

EPSS

0.001

Percentile

38.4%

JSON

github.com/cloudflare/goflow is vulnerable to denial of service. The vulnerability exists in the DecodeTemplateSet function of netflow.go due to improper handling of sflow packets in the sflow decode package, which allows an attacker to craft malformed packets to consume a huge memory resulting in an application crash.