Unscored CVE-2019-10054 EUVD-2019-2117GHSA-wm52-jfxr-m7x9

An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an in…

Published Aug 28, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Package: suricata Package: suricata Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	suricata	1:4.1.4-1	—
Debian 13	suricata	1:4.1.4-1	—

Ubuntu