Threats tagged 'ghsa-78x2-g79m-42h2'

CESNET ipfixcol2 versions 2.3.0 up to but not including 2.9.0 contain an integer overflow vulnerability in the Forwarder output plugin. This flaw allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping 16-bit message length counters. Attackers can send large data sets and templates to a collector forwarding over TCP, causing crashes and potentially writing 2-byte values to attacker-controlled memory addresses.