CVE-2014-6603
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows...
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
Exploit likelihood
What each source reports
NVD Score used
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
CVE-2014-6603- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
CVE-2014-6603- Updated
- 2026-11-02
EUVDEUVD-2014-6482 No score
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
EUVD-2014-6482- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9x5x-99rm-rq9h No score
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows...
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
GHSA-9x5x-99rm-rq9h- Updated
- 2026-11-02
OSV No score
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
CVE-2014-6603- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-6603 No score
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
- Record
DEBIAN-CVE-2014-6603- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-6603 is a medium vulnerability (CVSS 5.0) in Openinfosecfoundation Suricata, published October 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in suricata 2.0.4-1.
References
securityfocus.com/bid/70083
packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html
lists.fedoraproject.org/pipermail/package-announce/2014-October/139821.html
exchange.xforce.ibmcloud.com/vulnerabilities/96157