Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.

Description

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

References

• http://suricata-ids.org/2013/09/24/suricata-1-4-6-released/
• suricata-cve20135919-ssl-dos(87492) vdb-entry
• 54968 third-party-advisory