suricata-ids suricata vulnerabilities and exploits

(subscribe to this query)

NA

Suricata prior to 1.4.6 allows remote malicious users to cause a denial of service (crash) via a malformed SSL record.

Suricata-ids Suricata 1.4.4 Suricata-ids Suricata 1.4.3 Openinfosecfoundation Suricata 1.4 Suricata-ids Suricata 1.3.6 Openinfosecfoundation Suricata 1.3 Openinfosecfoundation Suricata Suricata-ids Suricata 1.3.2 Suricata-ids Suricata 1.3.1 Suricata-ids Suricata 1.4.2 Suricata-ids Suricata 1.4.1 Suricata-ids Suricata 1.3.5 Suricata-ids Suricata 1.3.4 Suricata-ids Suricata 1.3.3

7.5

CVSSv3

An issue exists in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes.

Suricata-ids Suricata 4.1.4 Suricata-ids Suricata 4.1.3

7.5

CVSSv3

An issue exists in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't d...

Suricata-ids Suricata 4.1.3 Suricata-ids Suricata 4.1.4

9.1

CVSSv3

An issue exists in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP segment with a fake FIN packet. The fake FIN packet is injected just before the PUSH ACK packet we want to bypass. The PUSH ACK packet (containing the data) will be igno...

Suricata-ids Suricata Suricata-ids Suricata 5.0.0 Debian Debian Linux 8.0

7.5

CVSSv3

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x prior to 4.0.6 allows remote malicious users to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.

Suricata-ids Suricata

5.3

CVSSv3

An issue exists in Suricata prior to 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed de...

Suricata-ids Suricata

1 Github repository

7.5

CVSSv3

Suricata prior to 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).

Suricata-ids Suricata

1 Github repository

9.8

CVSSv3

An issue exists in Suricata 4.1.x prior to 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the program runs into a heap-based buffer over-read. This occurs because the erroneous search for \r results in an integer underflow.

Suricata-ids Suricata

9.1

CVSSv3

An issue exists in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real ...

Suricata-ids Suricata 4.1.4

9.1

CVSSv3

An issue exists in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of header_len checking.

Suricata-ids Suricata 4.1.4

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook