Browse CVEs

HIGH 7.5 CVE-2024-55629 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, TCP streams wit… Suricata 7.0.8+ Fix from $1,9502025-01-06 HIGH 7.5 CVE-2024-55627 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially cra… Suricata 7.0.8+ Fix from $1,9502025-01-06 HIGH 7.5 CVE-2024-55628 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS res… Suricata 7.0.8+ Fix from $1,9502025-01-06 MEDIUM 5.5 CVE-2024-55626 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF fil… Suricata 7.0.8+ Fix from $1,6002025-01-06 HIGH 7.5 CVE-2024-55605 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input b… Suricata 7.0.8+ Fix from $1,9502025-01-06 HIGH 7.5 CVE-2024-47522 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, invalid… Suricata 7.0.7+ Fix from $1,9502024-10-16 HIGH 7.5 CVE-2024-45797 LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Prior to version 0.5.49, unbounded processing of HTTP reques… Libhtp 0.5.49+ Fix from $1,9502024-10-16 HIGH 7.5 CVE-2024-47187 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing… Suricata 7.0.7+ Fix from $1,9502024-10-16 HIGH 7.5 CVE-2024-47188 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing… Suricata 7.0.7+ Fix from $1,9502024-10-16 HIGH 7.5 CVE-2024-45795 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules u… Suricata 7.0.7+ Fix from $1,9502024-10-16 MEDIUM 5.3 CVE-2024-45796 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic… Suricata 7.0.7+ Fix from $1,6002024-10-16 HIGH 7.5 CVE-2024-38534 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead… Suricata 7.0.6+ Fix from $1,9502024-07-11 HIGH 7.5 CVE-2024-38535 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Suricata can run out of memory … Suricata 6.0.20 / 7.0.6+ Fix from $1,9502024-07-11 HIGH 7.5 CVE-2024-38536 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due… Suricata 7.0.6+ Fix from $1,9502024-07-11 HIGH 7.5 CVE-2024-37151 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragme… Suricata 6.0.20 / 7.0.6+ Fix from $1,9502024-07-11 MEDIUM 5.3 CVE-2024-32867 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, vari… Suricata 6.0.19 / 7.0.5+ Fix from $1,6002024-05-07 HIGH 7.5 CVE-2024-32663 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a sm… Suricata 6.0.19 / 7.0.5+ Fix from $1,9502024-05-07 HIGH 7.3 CVE-2024-32664 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, spec… Suricata 6.0.19 / 7.0.5+ Fix from $1,9502024-05-07 HIGH 7.5 CVE-2024-28871 LibHTP is a security-aware parser for the HTTP protocol and the related bits and pieces. Version 0.5.46 may parse malformed request traffic, leading … Libhtp Patch available Fix from $1,9502024-04-04 HIGH 7.5 CVE-2024-28870 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Su… Suricata 6.0.17 / 7.0.4+ Fix from $1,9502024-04-03 CRITICAL 9.8 CVE-2023-35853 In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by … Suricata 6.0.13+ Fix from $2,3002023-06-19 HIGH 7.5 CVE-2023-35852 In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trig… Suricata 6.0.13+ Fix from $1,9502023-06-19 CRITICAL 9.8 CVE-2021-37592 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. Suricata 5.0.8 / 6.0.4+ Fix from $2,3002021-11-19 MEDIUM 5.3 CVE-2019-17420 In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not al… Libhtp 0.5.31+ Fix from $1,6002019-10-10 HIGH 7.5 CVE-2019-1010279 Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An… Suricata 4.1.3+ Fix from $1,9502019-07-18 HIGH 7.5 CVE-2019-1010251 Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An atta… Suricata Patch available Fix from $1,9502019-07-18 HIGH 7.5 CVE-2019-10050 A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a p… Suricata 4.1.4+ Fix from $1,9502019-05-13 CRITICAL 9.8 CVE-2018-10243 htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization … Libhtp Mitigation only Fix from $2,3002019-04-04 CRITICAL 9.8 CVE-2018-10244 Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated… Suricata Mitigation only Fix from $2,3002019-04-04 HIGH 7.8 CVE-2018-1000167 OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following f… Suricata Update No fix yet Fix from $1,9502018-04-18