CVE-2019-16411

CVE-2019-16411 affects Suricata 4.1.4. The issue arises in decode-ipv4.c within IPV4OptValidateTimestamp when processing IPv4Options: if o->len data + 3) beyond the 3 data bytes, due to the incorrect index (should be *(o->data + 1)). This can lead to memory access errors. Multiple connected...