CVE-2019-16410

2019-09-2420:15:11

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.5%

JSON

An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to access a memory region that is not allocated, because of a lack of header_len checking.

CPENameOperatorVersion
suricataeqsuricata-4.0.0-beta1
suricataeqsuricata-2.0rc3
suricataeqsuricata-4.0.0-rc1
suricataeqsuricata-2.0.2
suricataeqsuricata-2.0beta1
suricataeqsuricata-3.2RC1
suricataeqsuricata-4.0.0-rc2
suricataeqsuricata-1.1
suricataeqsuricata-3.1.1
suricataeqsuricata-1.1beta2

Name	Operator	Version
suricata	eq	suricata-4.0.0-beta1
suricata	eq	suricata-2.0rc3
suricata	eq	suricata-4.0.0-rc1
suricata	eq	suricata-2.0.2
suricata	eq	suricata-2.0beta1
suricata	eq	suricata-3.2RC1
suricata	eq	suricata-4.0.0-rc2
suricata	eq	suricata-1.1
suricata	eq	suricata-3.1.1
suricata	eq	suricata-1.1beta2