CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

8 matches found

NVD•added 2017/03/20 4:59 p.m.•22 views

CVE-2015-8954

The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request...

9.8CVSS9.3AI score0.03258EPSS

SaveExploits0References3

OSV•added 2017/03/20 4:59 p.m.•18 views

DEBIAN-CVE-2015-8954

9.8CVSS7AI score0.03258EPSS

SaveExploits0References1

OSV•added 2017/03/20 4:59 p.m.•16 views

UBUNTU-CVE-2015-8954

9.8CVSS7.3AI score0.03258EPSS

SaveExploits0References3

Cvelist•added 2017/03/20 4:00 p.m.•28 views

CVE-2015-8954

9.3AI score0.03258EPSS

SaveExploits0References3

Mend•added 2017/03/20 4:00 p.m.•2 views

CVE-2015-8954

9.8CVSS0.03258EPSS

SaveExploits0References4

CVE•added 2017/03/20 4:00 p.m.•61 views

CVE-2015-8954

Summary: CVE-2015-8954 affects Suricata before 2.0.6. The MemcmpLowercase function omits the first byte from comparisons, potentially allowing a remote attacker to bypass intrusion-prevention functionality via a crafted HTTP request. Impact (as stated): Network-based bypass of IDS/IPS protections...

9.8CVSS9.2AI score0.03258EPSS

SaveExploits0References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2017/03/20 12:00 a.m.•6 views

CVE-2015-8954: Undefined Security Weakness

9.8CVSS5.9AI score0.03258EPSS

SaveExploits0References2

Positive Technologies•added 2015/01/17 12:00 a.m.•2 views

PT-2017-7507

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 2.0.6 Description The issue is related to the MemcmpLowercase function, which improperly excludes the first byte from comparisons. This might allow remote attackers to bypass intrusion-prevention functionality via a...

9.8CVSS0.03258EPSS

SaveExploits0References13

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by