Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: CESNET ipfixcol2 2.9.0 Clear all filters
TI-2026-85171 CVE-2026-122130 · GHSA-78x2-g79m-42h2

Integer overflow in CESNET ipfixcol2 Forwarder plugin enables heap overflow

Priority MEDIUM 42

CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length coun…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00318 Published 2026-11-04 Fixed in 2.9.0 CWE-190
TI-2026-85170 CVE-2026-122129 · GHSA-v896-hxw5-4767

Memory exhaustion in CESNET ipfixcol2 via TCP LZ4 decoder

Priority LOW 37

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00401 Published 2026-11-04 Fixed in 2.9.0 CWE-789
TI-2026-85169 CVE-2026-122127 · GHSA-4575-chq4-crfc

Heap buffer overflow in CESNET ipfixcol2 TCP LZ4 decoder

Priority MEDIUM 44

CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00387 Published 2026-11-04 Fixed in 2.9.0 CWE-787