Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2529

Multiple DoS Attack Vectors in sflow packet handling

Description

sflow decode package does not employ sufficient packet sanitisation which can lead to a denial of service attack. Attackers can craft malformed packets causing the process to consume large amounts of memory resulting in a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloudflare goflow

  • unspecified to < 3.4.4affected

References