Lucene search

K
redhatcveRedhat.comRH:CVE-2019-15699
HistoryMay 20, 2022 - 10:59 p.m.

CVE-2019-15699

2022-05-2022:59:49
redhat.com
access.redhat.com
6
suricata 4.1.4
memory access violation
sslv3
tls 1.2
corrupted packets

EPSS

0.002

Percentile

64.7%

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of the HSHelloExtensions part of the packet.

EPSS

0.002

Percentile

64.7%