Unscored CVE-2019-15699 EUVD-2019-6636GHSA-372v-6jcg-5gvf

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDec…

Published Sep 24, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: suricata Package: suricata Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of the HSHelloExtensions part of the packet.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	suricata	1:4.1.5-1	—
Debian 13	suricata	1:4.1.5-1	—

Ubuntu