CVE-2019-14459
nfdump 1.6.17 and earlier is affected by an integer overflow in the function...
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
CVE-2019-14459- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
CVE-2019-14459- Updated
- 2026-11-02
EUVDEUVD-2019-5647 No score
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
EUVD-2019-5647- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x7mr-9cvr-mx38
nfdump 1.6.17 and earlier is affected by an integer overflow in the function...
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
GHSA-x7mr-9cvr-mx38- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2019-14459
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
ALPINE-CVE-2019-14459- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
CVE-2019-14459- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-14459
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
DEBIAN-CVE-2019-14459- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-14459
nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).
- Record
UBUNTU-CVE-2019-14459- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
nfdumpAlpine:v3.10 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.11 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.12 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.13 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.14 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.15 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.16 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.17 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.18 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.19 |
before 1.6.18-r0 | 1.6.18-r0 |
Show 13 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nfdumpAlpine:v3.20 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.21 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.22 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.23 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.24 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpAlpine:v3.7 |
before 1.6.15-r1 | 1.6.15-r1 |
nfdumpAlpine:v3.8 |
before 1.6.17-r1 | 1.6.17-r1 |
nfdumpAlpine:v3.9 |
before 1.6.18-r0 | 1.6.18-r0 |
nfdumpDebian:12 |
before 1.6.18-1 | 1.6.18-1 |
nfdumpDebian:13 |
before 1.6.18-1 | 1.6.18-1 |
nfdumpDebian:14 |
before 1.6.18-1 | 1.6.18-1 |
nfdumpDebian:9 From an advisory covering 2 CVEs |
before 1.6.15-3+deb9u1, plus listed versions 1.6.15-3 |
1.6.15-3+deb9u1 |
nfdumpUbuntu:18.04:LTS |
All versions, plus listed versions 1.6.15-31.6.16-21.6.16-3 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-14459 is a high vulnerability (CVSS 7.5) in Nfdump Project Nfdump, published July 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. Fixed in nfdump 1.6.18-r0.
References
github.com/phaag/nfdump/issues/171
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET
security.gentoo.org/glsa/202003-17
lists.debian.org/debian-lts-announce/2020/09/msg00021.html
Show 8 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-14459
security.alpinelinux.org/vuln/CVE-2019-14459
security-tracker.debian.org/tracker/CVE-2019-14459
ubuntu.com/security/CVE-2019-14459
cve.org/CVERecord?id=CVE-2019-14459