1879 matches found
CVE-2018-18956
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...
CVE-2018-18956
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...
CVE-2018-18956
CVE-2018-18956 affects Suricata 4.x prior to 4.0.6, where the ProcessMimeEntity function in util-decode-mime.c allows remote attackers to trigger a denial of service (segfault/daemon crash) via crafted SMTP input. The vulnerability was exploited in the wild in November 2018. Public sources in the...
CVE-2018-18956
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...
VulnCheck KEV: CVE-2018-18956
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...
Debian DLA-1508-1 : suricata security update
CVE-2016-10728 If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it can lead to missed TCP/UDP detection in packets arriving afterwards. For Debian 8 'Jessie', this problem has been fixed in version 2.0.7-2+deb8u1. We recommend that you upgrade your...
[SECURITY] [DLA 1508-1] suricata security update
Package : suricata Version : 2.0.7-2+deb8u1 CVE ID : CVE-2016-10728 CVE-2016-10728 If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it can lead to missed TCP/UDP detection in packets arriving afterwards. For Debian 8 "Jessie", this problem has been...
DLA-1508-1 suricata - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1508-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Suricata Security Bypass Vulnerability
Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...
Suricata Obfuscation Vulnerability
Suricata is a set of network intrusion detection system IDS, intrusion prevention system IPS and network security monitoring engine developed by the Open Information Security Foundation OISF and its supported vendors, which supports multi-threading, built-in IPv6, and the ability to load...
Fedora 27 : suricata (2018-6227e1ff4c)
upstream security fix release Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 ...
Fedora Update for suricata FEDORA-2018-747d000693
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for suricata FEDORA-2018-6227e1ff4c
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: suricata-4.0.5-1.fc28
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
[SECURITY] Fedora 27 Update: suricata-4.0.5-1.fc27
The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...
DEBIAN-CVE-2018-14568
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...
Design/Logic Flaw
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST i.e., they act as if the RST had not yet been received...
Design/Logic Flaw
An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...
UBUNTU-CVE-2016-10728
An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the toclient direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection...