Threats affecting pkg:github/cesnet/ipfixcol2

CESNET ipfixcol2 versions 2.3.0 up to but not including 2.9.0 contain an integer overflow vulnerability in the Forwarder output plugin. This flaw allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length counters. Attackers can exploit this by sending near-65535-byte data sets and large templates to a collector forwarding over TCP, potentially causing a crash and enabling 2-byte writes to attacker-controlled memory addresses. The vulnerability is fixed in version 2.9.0.

CESNET ipfixcol2 versions 2.7.1 up to but not including 2.9.0 contain a memory allocation vulnerability in the Lz4Decoder::read_start_header() function. This flaw allows unauthenticated attackers to cause excessive memory allocation by sending LZ4 start headers with very large buffer sizes, potentially exhausting up to 4 GiB of memory per TCP connection. The issue can lead to denial of service by exhausting collector service resources. The vulnerability is fixed in version 2.9.0.

CESNET ipfixcol2 versions 2.7.1 up to but not including 2.9.0 contain a heap-based buffer overflow vulnerability in the Lz4Decoder.cpp component. This flaw allows unauthenticated network peers to write beyond allocated heap buffers by manipulating buffer size parameters, potentially crashing the collector or causing other memory corruption issues. The vulnerability is fixed in version 2.9.0.