Threats tagged 'ghsa-4575-chq4-crfc'

CESNET ipfixcol2 versions 2.7.1 up to but not including 2.9.0 contain a heap-based buffer overflow vulnerability in the Lz4Decoder.cpp component. This flaw allows unauthenticated network peers to write beyond heap buffer boundaries by manipulating buffer size parameters, potentially crashing the collector service. The vulnerability has a high severity score of 7.5 and impacts availability without affecting confidentiality or integrity.