Skip to content
OpenAdvisories

Package · Debian

suricata

116 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.4

    Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.…

  • Critical 9.4

    Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 stat…

  • Critical 9.1

    Suricata http2: protocol-change type confusion can lead to denial of service

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traff…