GitHub Advisoryadvisory · PyPI

GHSA-whmq-cfm5-j8mj NFStream Local Denial of Service (DoS)

MEDIUM Published 2022-05-24 Modified 2024-09-26 Official page ↗

Aliases: CVE-2020-25340
Ecosystem: PyPI
Packages: nfstream
Severity: Moderate
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses: CWE-401, CWE-770
Reviewed: 2024-04-22

Affected packages

• PyPI nfstream: 5.2.0 (no fix yet)

Description

An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service (DoS).

Alias · CVE (1)

CVE-2020-25340 An issue was discovered in NFStream 5.2.0. vulnerability

Weakness · CWE (2)

CWE-401 Missing Release of Memory after Effective Lifetime weakness
CWE-770 Allocation of Resources Without Limits or Throttling weakness

References

https://nvd.nist.gov/vuln/detail/CVE-2020-25340 advisory
https://github.com/ntop/nDPI/issues/994 web
https://github.com/nfstream/nfstream package
https://github.com/pypa/advisory-database/tree/main/vulns/nfstream/PYSEC-2021-68.yaml web