Browse CVEs

CRITICAL 9.8 CVE-2019-16411 An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in d… Suricata Mitigation only Fix from $2,3002019-09-24 CRITICAL 9.1 CVE-2019-15699 An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHello… Suricata Mitigation only Fix from $2,3002019-09-24 CRITICAL 9.1 CVE-2019-16410 An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a … Suricata Mitigation only Fix from $2,3002019-09-24 HIGH 7.5 CVE-2019-10054 An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memo… Suricata No fix yet Fix from $1,9502019-08-28 HIGH 7.5 CVE-2019-10055 An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within … Suricata No fix yet Fix from $1,9502019-08-28 HIGH 7.5 CVE-2019-10056 An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function Decod… Suricata No fix yet Fix from $1,9502019-08-28 HIGH 7.5 CVE-2019-10051 An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the … Suricata Patch available Fix from $1,9502019-08-28 HIGH 7.5 CVE-2019-10052 An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. … Suricata No fix yet Fix from $1,9502019-08-28 CRITICAL 9.8 CVE-2019-10053 An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the prog… Suricata 4.1.4+ Fix from $2,3002019-05-13 HIGH 7.5 CVE-2018-18956 The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and … Suricata 4.0.6+ Fix from $1,9502018-11-05 HIGH 7.5 CVE-2018-14568 Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with… Suricata 4.0.5+ Fix from $1,9502018-07-23 MEDIUM 5.3 CVE-2016-10728 An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it … Suricata 3.1.2+ Fix from $1,6002018-07-23