Threats tagged 'ghsa-v896-hxw5-4767'

CESNET ipfixcol2 versions 2.7.1 up to but not including 2.9.0 contain a memory allocation vulnerability in the Lz4Decoder::read_start_header() function. This flaw allows unauthenticated attackers to exhaust server memory by sending TCP connections with LZ4 start headers that declare very large ring buffer sizes, potentially forcing allocations up to 4 GiB per connection. The vulnerability can lead to denial of service by exhausting collector service resources.