Cesnet vulnerabilities
We track 4 vulnerabilities in Cesnet products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest Cesnet vulnerabilities
- 8.2 High severity
ipfixcol2: Integer Overflow or Wraparound
CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length counters. Attackers can send near-65535-byte
- 7.5 High severity
ipfixcol2: Out-of-bounds Write
CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer_size followed by a large decompressed_size to write up t
- 7.1 High severity
netopeer2: Use of Externally-Controlled Format String
Netopeer2 is a server for implementing network configuration management based on the `NETCONF` Protocol. In affected versions, a low-privileged authenticated `NETCONF` user can remotely crash `netopeer2-server` by sending a `get RPC` with an invalid `subtree f
- 7.5 High severity
libyang: Integer Overflow or Wraparound
libyang is a YANG data modeling language library. Prior to SO 5.2.15, lyb_read_string() in src/parser_lyb.c contains an integer overflow that results in a heap buffer overflow when parsing a maliciously crafted LYB binary blob. An attacker who can supply LYB d