PT-2022-17186 · Unknown · Sflow Decode Package

Justin Timperio · Published 2022-09-30 · Updated 2024-08-21 · CVE-2022-2529

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions sflow decode package versions prior to 3.4.4

Description The issue is related to insufficient packet sanitization in the sflow decode package, which can lead to a denial of service attack. Attackers can craft malformed packets, causing the process to consume large amounts of memory and resulting in a denial of service.

Recommendations For versions prior to 3.4.4, update to version 3.4.4 to resolve the issue. As a temporary workaround, consider restricting public access to the goflow collector to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

CVE-2022-2529

GHSA-9RPW-2H95-666C

GO-2022-1032

Affected Products

Sflow Decode Package

References · 10

• https://osv.dev/vulnerability/GHSA-9rpw-2h95-666c · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2529 · Security Note
• https://osv.dev/vulnerability/GO-2022-1032 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-2529 · Vendor Advisory
• https://github.com/cloudflare/goflow · Note
• https://github.com/cloudflare/goflow/commit/2b94619a6204443e3ca1769f4e459f9f57039c51 · Note
• https://github.com/cloudflare/goflow/commit/c829ccd2c0aafdc9b886b20bf6f28095607f4998 · Note
• https://github.com/cloudflare/goflow/security/advisories/GHSA-9rpw-2h95-666c · Note
• https://github.com/cloudflare/goflow/releases/tag/v3.4.4 · Note
• https://t.me/cibsecurity/50761 · Telegram Post