4 matches found
Deserialization of untrusted data
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote...
CVE-2018-1000167
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote...
PT-2018-9337
Name of the Vulnerable Software and Affected Versions OISF suricata-update version 1.0.0a1 Description The issue is related to an Insecure Deserialization vulnerability in the yaml.load function used in several files, including config.py and sources.py. This vulnerability can be exploited through...
CVE-2018-1000167: Deserialization of Untrusted Data
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote...