CVE:CVE-2019-14459
CNNVD:CNNVD-201907-1638
nfdump是一款用于收集和处理netflow数据的开源工具。
nfdump 1.6.17及之前版本中的ipfix.c文件的‘Process_ipfix_template_withdraw’函数存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade nfdump_project nfdump to a higher version than 1.6.17,and avoid the version (,1.6.17]; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 29,30,and avoid the version 29,30