CVE-2019-1010057: Debian Linux

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

nfdump 1.6.16 and earlier is affected by: Buffer Overflow. The impact is: The impact could range from a denial of service to local code execution. The component is: nfx.c:546, nffile_inline.c:83, minilzo.c (redistributed). The attack vector is: nfdump must read and process a specially crafted file. The fixed version is: after commit 9f0fe9563366f62a71d34c92229da3432ec5cf0e.

Affected products

• Debian Debian Linux: version 9.0 only
• Fedoraproject Fedora: version 29 only; version 30 only
• Nfdump Project Nfdump: up to and including 1.6.16

Published 2019-07-16. Last modified 2026-06-17.