ELA-320-1 tcpflow security update

fir for overflow vulnerability

2020-11-29
Packagetcpflow
Version1.4.4+repack1-3+deb8u1
Related CVEs CVE-2018-14938


An issue has been found in tcpflow, a TCP flow recorder.

Due to an overflow vulnerability in function handle_80211, an out-of-bounds read with access to sensitive memory or a denial of service might happen.



For Debian 8 jessie, these problems have been fixed in version 1.4.4+repack1-3+deb8u1.

We recommend that you upgrade your tcpflow packages.

Further information about Extended LTS security advisories can be found in the dedicated section of our website.