A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect
    values causing incorrect computation, leading to denial of service during an address_histogram call or a
    get_histogram call. (CVE-2018-18409)

Update tcpflow to 1.5.2 tag at github, fixing a security issue.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3955-1 advisory.

    It was discovered that tcpflow incorrectly handled certain malformed network

    packets. A remote attacker could send these packets to a target system, causing tcpflow to crash or     possibly disclose sensitive information.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
424531	Alpine: multiple tcpflow packages: security update to 1.5.0-r1	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
424531	Alpine: multiple tcpflow packages: security update to 1.5.0-r1	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
400472	Alpine: multiple tcpflow packages: security update to 1.5.0-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400472	Alpine: multiple tcpflow packages: security update to 1.5.0-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
400256	Alpine: multiple tcpflow packages: security update to 1.5.0-r4 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
400256	Alpine: multiple tcpflow packages: security update to 1.5.0-r4 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
124553	Fedora 30 : tcpflow (2019-ea0f30909a)	Nessus	Fedora Local Security Checks	medium
124322	Ubuntu 16.04 LTS / 18.04 LTS : tcpflow vulnerabilities (USN-3955-1)	Nessus	Ubuntu Local Security Checks	critical
123043	Fedora 28 : tcpflow (2019-8cdd669aca)	Nessus	Fedora Local Security Checks	medium
123037	Fedora 29 : tcpflow (2019-2c020ccbd5)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2018-18409

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium

critical

medium

medium