GHSA-4575-chq4-crfcHighCVSS 7.5
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that...
🔗 CVE IDs covered (1)
📋 Description
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer_size followed by a large decompressed_size to write up to 65535 controlled bytes and crash the collector.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-122127
- https://github.com/CESNET/ipfixcol2/commit/fd5cb168efb4b864d33f655174711b2779cef502
- https://github.com/CESNET/ipfixcol2
- https://github.com/CESNET/ipfixcol2/blob/v2.8.0/src/plugins/input/tcp/src/Lz4Decoder.cpp#L139-L151
- https://github.com/CESNET/ipfixcol2/releases/tag/v2.9.0
- https://www.vulncheck.com/advisories/cesnet-ipfixcol2-2.7.1-before-2.9.0-heap-buffer-overflow-via-tcp-lz4-decoder
- https://github.com/advisories/GHSA-4575-chq4-crfc