Home / mailings

PDF

[USN-9079-1] nfdump vulnerabilities

Posted on 13 November 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-9079-1
November 12, 2026

nfdump vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in nfdump.

Software Description:
- nfdump: netflow capture daemon

Details:

It was discovered that nfdump incorrectly handled certain input files,
leading to a buffer overflow. If a user or automated system were tricked
into processing a specially crafted file, an attacker could possibly use
this issue to cause nfdump to crash or execute arbitrary code.
(CVE-2019-1010057)

It was discovered that nfdump incorrectly handled certain IPFIX template
withdrawal messages, leading to an integer overflow. A remote attacker
could possibly use this issue to cause nfdump to crash, resulting in a
denial of service. (CVE-2019-14459)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
nfdump 1.6.16-3ubuntu0.1~esm1
Available with Ubuntu Pro
nfdump-flow-tools 1.6.16-3ubuntu0.1~esm1
Available with Ubuntu Pro
nfdump-sflow 1.6.16-3ubuntu0.1~esm1
Available with Ubuntu Pro

After a standard system update you need to restart nfdump to make all the
necessary changes.

References:
https://ubuntu.com/security/notices/USN-9079-1
CVE-2019-1010057, CVE-2019-14459

--===============0393546829801218662==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP