Unscored CVE-2019-16410 EUVD-2019-7152GHSA-rwqc-wjqr-v9q2

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to…

Published Sep 24, 2019 · Updated Aug 5, 2024 · Assigned by mitre

Package: suricata Package: suricata Ecosystem: Debian Ecosystem: Ubuntu

Description

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of header_len checking.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	suricata	1:4.1.5-1	—
Debian 13	suricata	1:4.1.5-1	—

Ubuntu