ipfixcol2 vulnerabilities

2 known vulnerabilities in ipfixcol2 from Cesnet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  ipfixcol2: Integer Overflow or Wraparound

  CVE-2026-122130Nov 4, 2026Cesnet

  CESNET ipfixcol2 2.3.0 before 2.9.0 contains an integer overflow vulnerability in the Forwarder output plugin that allows unauthenticated IPFIX exporters to overflow a heap buffer by wrapping uint16_t message length counters. Attackers can send near-65535-byte

• 7.5 High severity

  ipfixcol2: Out-of-bounds Write

  CVE-2026-122127Nov 4, 2026Cesnet

  CESNET ipfixcol2 2.7.1 before 2.9.0 contains a heap-based buffer overflow in Lz4Decoder.cpp that allows unauthenticated network peers to write past heap buffers. Attackers can declare a small ring buffer_size followed by a large decompressed_size to write up t