OSV-2021-236 Heap-use-after-free in DatasetAdd

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29886 Crash type: Heap-use-after-free READ 4 Crash state: DatasetAdd DetectDatasetBufferMatch DetectEngineContentInspection...

PT-2021-28026

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free READ 4 crash type. The crash state includes functions such as DatasetAdd, DetectDatasetBufferMatch, and...

The vulnerability of the DetectEngineContentInspection component in the Suricata intrusion detection and prevention system allows a intruder to trigger a service failure.

The vulnerability of the DetectEngineContentInspection component in the Suricata intrusion detection and prevention system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to trigger a service failure by using specially crafted network traffic,...

CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

CVE-2017-15377

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

CVE-2017-15377: Undefined Security Weakness

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found;...

PT-2017-3436

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 4.x Description The issue is related to the DetectEngineContentInspection component in Suricata, which can be triggered by crafted network traffic with a certain signature. This causes the search engine to perform...