CVE-2023-35853

2023-06-1904:15:11

Debian Security Bug Tracker

security-tracker.debian.org

suricata

lua

code execution

fix

security configuration

unix

0.001 Low

EPSS

Percentile

40.0%

JSON

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

OSVersionArchitecturePackageVersionFilename
Debian12allsuricata<= 1:6.0.10-1suricata_1:6.0.10-1_all.deb
Debian11allsuricata<= 1:6.0.1-3suricata_1:6.0.1-3_all.deb
Debian10allsuricata<= 1:4.1.2-2+deb10u1suricata_1:4.1.2-2+deb10u1_all.deb
Debian999allsuricata< 1:6.0.13-1suricata_1:6.0.13-1_all.deb
Debian13allsuricata< 1:6.0.13-1suricata_1:6.0.13-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	suricata	<= 1:6.0.10-1	suricata_1:6.0.10-1_all.deb
Debian	11	all	suricata	<= 1:6.0.1-3	suricata_1:6.0.1-3_all.deb
Debian	10	all	suricata	<= 1:4.1.2-2+deb10u1	suricata_1:4.1.2-2+deb10u1_all.deb
Debian	999	all	suricata	< 1:6.0.13-1	suricata_1:6.0.13-1_all.deb
Debian	13	all	suricata	< 1:6.0.13-1	suricata_1:6.0.13-1_all.deb

0.001 Low

EPSS

Percentile

40.0%

JSON

Related for DEBIANCVE:CVE-2023-35853