116 results · Feed
-
High 7.5
Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed…
-
High 7.5
Suricata uses excessive resource use in malformed ssh traffic parsing
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as…
-
Medium 5.3
Suricata http2: header handling evasion
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
-
High 7.1
Suricata http: heap use after free with http.request_header and http.response_header keywords
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header…
-
High 7.5
crafted traffic can cause denial of service
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic…
-
High 7.5
Suricata's pgsql: memory exhaustion use on record parsing
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.3, excessive memory use during pgsql parsing could lead to OOM-related crashes. This vulnerability is patched in 7.0.3. …
-
Unscored —
In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, th…
-
Unscored —
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. T…
-
Unscored —
An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an …
-
Unscored —
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a …
-
Unscored —
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
-
Unscored —
An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed T…
-
Unscored —
An issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature by overlapping a TCP …
-
Unscored —
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble …
-
Unscored —
An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function…
-
Unscored —
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the pa…
-
Unscored —
An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type…
-
Unscored —
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and par…
-
Unscored —
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.d…
-
Unscored —
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to ac…
-
Unscored —
An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { f…
-
Unscored —
Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detec…
-
Unscored —
Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection …
-
Unscored —
An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of…
-
Unscored —
A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function Deco…
-
Unscored —
htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer o…
-
Unscored —
Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing cod…
-
Unscored —
Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing …
-
Unscored —
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a de…
-
Unscored —
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Wi…
-
Unscored —
An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow i…
-
Unscored —
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious s…
-
Unscored —
In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic w…
-
Unscored —
libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference).
-
Unscored —
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fr…
-
Unscored —
The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors relate…