suricata vulnerabilities (Alpine)
40 vulnerabilities.
-
suricataAlpine Suricata dcerpc: quadratic complexity in dcerpc buffering 7.5 High -
suricataAlpine Suricata http2: unbounded resource consumption 7.5 High -
suricataAlpine Suricata smtp/mine: quadratic complexity in extracting urls 7.5 High -
suricataAlpine Suricata stream: quadratic complexity in stream inspection 7.5 High -
suricataAlpine Suricata krb5: quadratic complexity in krb5 buffering 7.5 High -
suricataAlpine Suricata tls: null dereference in tls.alpn rule keyword 7.5 High -
suricataAlpine Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer 7.5 High -
suricataAlpine Suricata is vulnerable to a heap buffer overflow on verdict 7.5 High -
suricataAlpine Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable 7.5 High -
suricataAlpine Suricata is vulnerable to a stack overflow on larger compressed data 7.5 High -
suricataAlpine Suricata is vulnerable to a stack overflow from big content-type 7.5 High -
suricataAlpine Suricata is vulnerable to a null deref when used with base64_data 7.5 High -
suricataAlpine Suricata is vulnerable to unbounded memory growth for decompression 7.5 High -
suricataAlpine Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref 7.5 High -
suricataAlpine Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms 6.2 Medium -
suricataAlpine Suricata's improper use of entropy keyword can lead to a NULL-ptr deref 7.5 High -
suricataAlpine Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets 7.5 High -
suricataAlpine Suricata generic detection bypass using TCP urgent support 7.5 High -
suricataAlpine Suricata oversized resource names utilizing DNS name compression can lead to resource starvation 7.5 High -
suricataAlpine Suricata segfault on StreamingBufferSlideToOffsetWithRegions 5.9 Medium -
suricataAlpine Suricata oversized bpf file can lead to buffer overflow 3.3 Low -
suricataAlpine Suricata allows stack overflow in transforms 7.5 High -
suricataAlpine Suricata ja4: invalid alpn leads to panic 7.5 High -
suricataAlpine Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS 7.5 High -
suricataAlpine Suricata datasets: missing hashtable random seed leads to potential DoS 7.5 High -
suricataAlpine LibHTP's unbounded header handling leads to denial service 7.5 High -
suricataAlpine Suricata defrag: off by one can lead to policy bypass 5.3 Medium -
suricataAlpine Suricata detect/datasets: reachable assertion with unimplemented rule option 7.5 High -
suricataAlpine Suricata http/range: NULL-ptr deref when http.memcap is reached 7.5 High -
suricataAlpine Suricata http2: oom from duplicate headers 7.5 High -
suricataAlpine Suricata modbus: txs without responses are never freed 7.5 High -
suricataAlpine Suricata defrag: IP ID reuse can lead to policy bypass 5.3 Medium -
suricataAlpine Suricata's defrag contains various issues leading to policy bypass 5.3 Medium -
suricataAlpine Suricata's base64 contains an out of bounds write 5.3 Medium -
suricataAlpine Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation 7.5 High -
suricataAlpine In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able... 9.8 Critical -
suricataAlpine In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules),... 7.5 High -
suricataAlpine An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based... 7.5 High -
suricataAlpine Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP... 9.8 Critical -
suricataAlpine Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." 7.5 High