CVE-2019-14459

HIGH

nfdump < 1.6.17 - Denial of Service via Integer Overflow in Process_ipfix_template_withdraw

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-14459. PoCs published by X-C3LL.

AI-analyzed exploit summary This PoC exploits an integer overflow in nfdump's Process_ipfix_template_withdraw function, causing a denial of service via a crafted UDP packet. The overflow bypasses a size check, leading to an infinite loop and segmentation fault.

Description

nfdump 1.6.17 and earlier is affected by an integer overflow in the function Process_ipfix_template_withdraw in ipfix.c that can be abused in order to crash the process remotely (denial of service).

Exploits (1)

github WORKING POC 11 stars

by X-C3LL · pythonpoc

https://github.com/X-C3LL/PoC-CVEs/tree/master/CVE-2019-14459

View Code ZIP pw:eip

This PoC exploits an integer overflow in nfdump's Process_ipfix_template_withdraw function, causing a denial of service via a crafted UDP packet. The overflow bypasses a size check, leading to an infinite loop and segmentation fault.

Classification

Working Poc 95%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: nfdump 1.6.17 and below

No auth needed

Prerequisites: network access to target · UDP port reachable

MITRE ATT&CK