CVE-2026-122129 | BDVDB-2026-400417 Detail
CESNETipfixcol2
Description#
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a memory allocation vulnerability in Lz4Decoder::read_start_header() that allows unauthenticated attackers to exhaust memory by declaring unbounded ring buffer sizes. Attackers can open TCP connections sending LZ4 start headers with very large buffer sizes, forcing up to 4 GiB allocations per connection and denying collector service.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: network.
Weaknesses#
- CWE-789 Memory Allocation with Excessive Size Value
References#
- https://github.com/CESNET/ipfixcol2/commit/1a199033eff847941353c5c039cb806a9ad8aa6f
- https://github.com/CESNET/ipfixcol2
- https://github.com/CESNET/ipfixcol2/releases/tag/v2.9.0
- https://github.com/CESNET/ipfixcol2/blob/v2.8.0/src/plugins/input/tcp/src/Lz4Decoder.cpp#L126-L131
- https://www.vulncheck.com/advisories/cesnet-ipfixcol2-2.7.1-before-2.9.0-memory-exhaustion-via-tcp-lz4-decoder
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.