High severity7.5NVD Advisory· Published Jul 31, 2019· Updated Jun 17, 2026

CVE-2019-14459

Description

nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nfdump Project/Nfdump
cpe:2.3:a:nfdump_project:nfdump:*:*:*:*:*:*:*:*
Range: <=1.6.17
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
nfdump/nfdumpdescription
Nfdump/nfdumpllm-create
Range: <=1.6.17
Phaag/nfdumpllm-create
Range: <=1.6.17

Patches

Vulnerability mechanics

References

github.com/phaag/nfdump/commit/3b006ededaf351f1723aea6c727c9edd1b1fff9bnvdPatch
github.com/phaag/nfdump/issues/171nvdExploitThird Party Advisory
lists.debian.org/debian-lts-announce/2020/09/msg00021.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202003-17nvdThird Party Advisory
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULSZMKA7P7REJMANVL7D6WMZ2L7IRSET/nvd
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTONOGJU5FSMFNRCT6OHXYUMDRKH4RPA/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000