Vulnerability index

Browse CVEs

62 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Suricata HIGH 7.5
CVE-2024-55629

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams wit…

Fix: 7.0.8+
Fix from $1,950 2025-01-06
Suricata HIGH 7.5
CVE-2024-55627

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially cra…

Fix: 7.0.8+
Fix from $1,950 2025-01-06
Suricata HIGH 7.5
CVE-2024-55628

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS res…

Fix: 7.0.8+
Fix from $1,950 2025-01-06
Suricata MEDIUM 5.5
CVE-2024-55626

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF fil…

Fix: 7.0.8+
Fix from $1,600 2025-01-06
Suricata HIGH 7.5
CVE-2024-55605

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input b…

Fix: 7.0.8+
Fix from $1,950 2025-01-06
Suricata HIGH 7.5
CVE-2024-47522

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid…

Fix: 7.0.7+
Fix from $1,950 2024-10-16
Libhtp HIGH 7.5
CVE-2024-45797

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP reques…

Fix: 0.5.49+
Fix from $1,950 2024-10-16
Suricata HIGH 7.5
CVE-2024-47187

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing…

Fix: 7.0.7+
Fix from $1,950 2024-10-16
Suricata HIGH 7.5
CVE-2024-47188

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing…

Fix: 7.0.7+
Fix from $1,950 2024-10-16
Suricata HIGH 7.5
CVE-2024-45795

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules u…

Fix: 7.0.7+
Fix from $1,950 2024-10-16
Suricata MEDIUM 5.3
CVE-2024-45796

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic…

Fix: 7.0.7+
Fix from $1,600 2024-10-16
Suricata HIGH 7.5
CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead…

Fix: 7.0.6+
Fix from $1,950 2024-07-11
Suricata HIGH 7.5
CVE-2024-38535

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Suricata can run out of memory …

Fix: 6.0.20 / 7.0.6+
Fix from $1,950 2024-07-11
Suricata HIGH 7.5
CVE-2024-38536

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due…

Fix: 7.0.6+
Fix from $1,950 2024-07-11
Suricata HIGH 7.5
CVE-2024-37151

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragme…

Fix: 6.0.20 / 7.0.6+
Fix from $1,950 2024-07-11
Suricata MEDIUM 5.3
CVE-2024-32867

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, vari…

Fix: 6.0.19 / 7.0.5+
Fix from $1,600 2024-05-07
Suricata HIGH 7.5
CVE-2024-32663

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a sm…

Fix: 6.0.19 / 7.0.5+
Fix from $1,950 2024-05-07
Suricata HIGH 7.3
CVE-2024-32664

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, spec…

Fix: 6.0.19 / 7.0.5+
Fix from $1,950 2024-05-07
Libhtp HIGH 7.5
CVE-2024-28871

LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading …

Patch available
Fix from $1,950 2024-04-04
Suricata HIGH 7.5
CVE-2024-28870

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Su…

Fix: 6.0.17 / 7.0.4+
Fix from $1,950 2024-04-03
Suricata CRITICAL 9.8
CVE-2023-35853

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by …

Fix: 6.0.13+
Fix from $2,300 2023-06-19
Suricata HIGH 7.5
CVE-2023-35852

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trig…

Fix: 6.0.13+
Fix from $1,950 2023-06-19
Suricata CRITICAL 9.8
CVE-2021-37592

Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.

Fix: 5.0.8 / 6.0.4+
Fix from $2,300 2021-11-19
Libhtp MEDIUM 5.3
CVE-2019-17420

In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not al…

Fix: 0.5.31+
Fix from $1,600 2019-10-10
Suricata HIGH 7.5
CVE-2019-1010279

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An…

Fix: 4.1.3+
Fix from $1,950 2019-07-18
Suricata HIGH 7.5
CVE-2019-1010251

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An atta…

Patch available
Fix from $1,950 2019-07-18
Suricata HIGH 7.5
CVE-2019-10050

A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a p…

Fix: 4.1.4+
Fix from $1,950 2019-05-13
Libhtp CRITICAL 9.8
CVE-2018-10243

htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization …

Mitigation only
Fix from $2,300 2019-04-04
Suricata CRITICAL 9.8
CVE-2018-10244

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated…

Mitigation only
Fix from $2,300 2019-04-04
Suricata Update HIGH 7.8
CVE-2018-1000167

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following f…

No fix yet
Fix from $1,950 2018-04-18