CVE-2019-1010057 Memory corruption in nfdump

High 7.8 Published 16 Jul 2019 Updated 5 Aug 2024

A buffer overflow in nfdump allows attackers to cause denial of service or execute code by tricking users into processing a specially crafted file.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2019-1010057?

CVE-2019-1010057 is a high-severity memory corruption vulnerability in Debian Debian Linux, published on 16 Jul 2019. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.

Weakness: CWE-787

Which versions are affected by CVE-2019-1010057?

It affects 3 products.

Products include Debian Debian Linux, Fedoraproject Fedora, Nfdump Project Nfdump.

How do I fix CVE-2019-1010057?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2019-1010057 being exploited?

There is no known exploitation of CVE-2019-1010057 in the wild and no public exploit code.

All Debian Debian Linux vulnerabilities

Sources

Also known as ALPINE-CVE-2019-1010057, DEBIAN-CVE-2019-1010057, GHSA-99vm-6j3f-fmrq, UBUNTU-CVE-2019-1010057.