EUVD-2017-16215

Malware in sbrugna...

suricata:fuzz_sigpcap: Heap-buffer-overflow in DefragInsertFrag

Project: https://github.com/OISF/suricata.git Detailed Report: https://oss-fuzz.com/testcase?key=6012698525171712 Project: suricata Fuzzing Engine: afl Fuzz Target: fuzzsigpcap Job Type: aflasansuricata Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x61e00000762a Crash...

CVE-2017-7177

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching...

CVE-2017-7177

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching...

CVE-2017-7177: Improperly Implemented Security Check for Standard

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching...

PT-2017-17559

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 3.2.1 Description The issue is caused by a lack of a check for the IP protocol during fragment matching, leading to an IPv4 defragmentation evasion problem. Recommendations For versions prior to 3.2.1, update to...

[USN-869-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-869-1 December 10, 2009 linux vulnerability CVE-2009-1298, CVE-2009-4131 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 9.10 This...

USN-869-1: Linux kernel vulnerabilities

David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets. A remote attacker could send specially crafted traffic that would cause a system to crash, leading to a denial of service. The fix was included in the earlier kernels from USN-864-1...