CVE catalog

CVE-2018-18409

tcpflow: CVE-2018-18409

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Published
Source
[NVD] · [CVE record]
EPSS
1.30% · Oct 25, 2026

A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computation, leading to denial of service during an address_histogram call or a get_histogram call.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiantcpflowsid1.6.1-3fixed
Debiantcpflowforky1.6.1-3fixed
Debiantcpflowtrixie1.6.1-3fixed
Debiantcpflowbookworm1.6.1-2fixed
Alpinetcpflow3.101.5.0-r1fixed
Alpinetcpflow3.111.5.0-r1fixed
Alpinetcpflow3.121.5.0-r1fixed
Alpinetcpflow3.131.5.0-r1fixed
Alpinetcpflow3.141.5.0-r1fixed
Alpinetcpflow3.151.5.0-r1fixed
Alpinetcpflow3.161.5.0-r1fixed
Alpinetcpflow3.171.5.0-r1fixed
Alpinetcpflow3.181.5.0-r1fixed
Alpinetcpflow3.191.5.0-r1fixed
Alpinetcpflow3.201.5.0-r1fixed
Alpinetcpflow3.211.5.0-r1fixed
Alpinetcpflow3.221.5.0-r1fixed
Alpinetcpflow3.231.5.0-r1fixed
Alpinetcpflow3.241.5.0-r1fixed
Alpinetcpflow3.71.5.0-r1fixed
Alpinetcpflow3.81.5.0-r1fixed
Alpinetcpflow3.91.5.0-r1fixed
Ubuntutcpflowpro1.3.0+dfsg-2vulnerable
Ubuntutcpflowpro1.4.3+repack1-1vulnerable
Ubuntutcpflowpro1.4.4+repack1-1vulnerable
Ubuntutcpflowpro1.4.4+repack1-2vulnerable
Ubuntutcpflowpro1.4.4+repack1-2ubuntu0.1~esm1fixed
Ubuntutcpflow16.041.4.4+repack1-3vulnerable
Ubuntutcpflow16.041.4.5+repack1-1vulnerable
Ubuntutcpflow16.041.4.5+repack1-1ubuntu0.1fixed
Ubuntutcpflow18.041.4.5+repack1-4vulnerable
Ubuntutcpflow18.041.4.5+repack1-4build1vulnerable
Ubuntutcpflow18.041.4.5+repack1-4build2vulnerable
Ubuntutcpflow18.041.4.5+repack1-4ubuntu0.18.04.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiantcpflowsourcesid1.5.2+repack1-1unimportantNot reported[911263]
Debiantcpflowsourceforky1.5.2+repack1-1unimportantNot reported[911263]
Debiantcpflowsourcetrixie1.5.2+repack1-1unimportantNot reported[911263]
Debiantcpflowsourcebookworm1.5.2+repack1-1unimportantNot reported[911263]
Alpinetcpflowapk3.101.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.111.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.121.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.131.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.141.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.151.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.161.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.171.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.181.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.191.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.201.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.211.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.221.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.231.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.241.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.71.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.81.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Alpinetcpflowapk3.91.5.0-r1Not reportedALPINE-CVE-2018-18409Not reported
Ubuntutcpflowdebpro1.4.4+repack1-2ubuntu0.1~esm1Not reportedUBUNTU-CVE-2018-18409Not reported
Ubuntutcpflowdeb16.041.4.5+repack1-1ubuntu0.1Not reportedUBUNTU-CVE-2018-18409Not reported
Ubuntutcpflowdeb18.041.4.5+repack1-4ubuntu0.18.04.1Not reportedUBUNTU-CVE-2018-18409Not reported

[Debian bug #911263]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [tcpflow]Fixed

    Source package: [tcpflow]

    Details (2)

    • 1.6.1-2+b1 · amd64 · bookworm

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · bookworm; dsa · tcpflow · debian · 12

    • 1.6.1-2+b1 · arm64 · bookworm

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · bookworm; dsa · tcpflow · debian · 12

  • [tcpflow-nox]Fixed

    Source package: [tcpflow]

    Details (2)

    • 1.6.1-2+b1 · amd64 · bookworm

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · bookworm; dsa · tcpflow · debian · 12

    • 1.6.1-2+b1 · arm64 · bookworm

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · bookworm; dsa · tcpflow · debian · 12

[Debian 13 (Trixie)]

  • [tcpflow]Fixed

    Source package: [tcpflow]

    Details (2)

    • 1.6.1-3+b1 · amd64 · trixie

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · 13

    • 1.6.1-3+b2 · arm64 · trixie

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · 13

  • [tcpflow-nox]Fixed

    Source package: [tcpflow]

    Details (2)

    • 1.6.1-3+b1 · amd64 · trixie

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · 13

    • 1.6.1-3+b2 · arm64 · trixie

      Fixed · Fixed: 1.5.2+repack1-1

      dsa · tcpflow · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]