CVE-2022-2529 — Multiple DoS Attack Vectors in sflow packet handling

CVE-2022-2529

Multiple DoS Attack Vectors in sflow packet handling PUBLISHED

Description (CNA)

sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume large amounts of memory resulting in a denial of service.

Affected (CNA)

Vendor / product	Versions
Cloudflare / goflow	affected unspecified before 3.4.4

CWE

CWE-20, CWE-400

References

https://github.com/cloudflare/goflow/security/advisories/GHSA-9rpw-2h95-666c

ADP enrichment

CVE

No English description supplied.

https://github.com/cloudflare/goflow/security/advisories/GHSA-9rpw-2h95-666c

CISA-ADP

No English description supplied.

No references supplied.