CVE-2019-1010057

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
dwfCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
nfdump_projectnfdump
𝑥
≤ 1.6.16
debiandebian_linux
9.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
nfdump
bullseye
1.6.22-2
fixed
bookworm
1.7.1-2+deb12u1
fixed
trixie
1.7.4-1
fixed
sid
1.7.5-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
nfdump
noble
Fixed 1.6.17-1
released
mantic
Fixed 1.6.17-1
released
lunar
Fixed 1.6.17-1
released
kinetic
Fixed 1.6.17-1
released
jammy
Fixed 1.6.17-1
released
impish
Fixed 1.6.17-1
released
hirsute
Fixed 1.6.17-1
released
groovy
Fixed 1.6.17-1
released
focal
Fixed 1.6.17-1
released
eoan
Fixed 1.6.17-1
released
disco
Fixed 1.6.17-1
released
bionic
needed
xenial
not-affected
trusty
dne