Fedora 29 : suricata (2018-787ee605a5)

This update fixes a segfault in the SMTP parser. This bug is tracked as CVE-2018-18956. There are a number of other bugfixes and performance improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 28 : suricata (2018-cf58e1cbd1)

This update fixes a segfault in the SMTP parser. This bug is tracked as CVE-2018-18956. There are a number of other bugfixes and performance improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

Fedora 27 : suricata (2018-d05860129f)

This update fixes a segfault in the SMTP parser. This bug is tracked as CVE-2018-18956. There are a number of other bugfixes and performance improvements. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has...

DEBIAN-CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service segfault and daemon crash via crafted input to the SMTP parser, as exploited in the wild in November 2018...

CVE-2018-18956

CVE-2018-18956 affects Suricata 4.x prior to 4.0.6, where the ProcessMimeEntity function in util-decode-mime.c allows remote attackers to trigger a denial of service (segfault/daemon crash) via crafted SMTP input. The vulnerability was exploited in the wild in November 2018. Public sources in the...