Updated tcpflow packages fix security vulnerability
Publication date: 12 Sep 2019Modification date: 12 Sep 2019
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-18409
Description
Updated tcpflow package fixes security vulnerability: A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call (CVE-2018-18409).
References
SRPMS
6/core
- tcpflow-1.5.2-1.mga6