Debian DLA-1603-1 : suricata security update

Several issues were found in suricata, an intrusion detection and prevention tool. CVE-2017-7177 Suricata has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. CVE-2017-15377 It was possible to trigger lots of redundant checks on the...

CVE-2018-6794

Suricata before 4.0.4 is vulnerable to an HTTP detection bypass (CVE-2018-6794) in detect.c and stream-tcp.c. A server can inject data before the TCP 3‑way handshake completes; web clients may accept the data, but Suricata’s HTTP/tailored stream checks can skip it, primarily affecting HTTP signat...