CVE-2019-16410

CVE-2019-16410 affects Suricata 4.1.4. The issue occurs in the Defrag4Reassemble function (defrag.c) when processing multiple fragmented IPv4 packets, where a missing header_len check allows access to a memory region that is not allocated. This is the underlying cause of the vulnerability and is ...