suricata vulnerabilities (Debian)
116 vulnerabilities.
-
suricataDebian Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected... 9.4 Critical -
suricataDebian Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup... 9.4 Critical -
suricataDebian Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state 5.9 Medium -
suricataDebian Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption 7.5 High -
suricataDebian Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation 7.0 High -
suricataDebian Suricata app-layer: passed flows can retain transactions, causing resource exhaustion 7.5 High -
suricataDebian Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption 7.5 High -
suricataDebian Suricata smb: some SMB flows can cause resource exhaustion 5.9 Medium -
suricataDebian Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading 3.3 Low -
suricataDebian Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption 7.5 High -
suricataDebian Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load 3.3 Low -
suricataDebian Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection 3.7 Low -
suricataDebian Suricata sip: large SIP message bodies can evade detection with frame keyword 3.7 Low -
suricataDebian Suricata swf: heap buffer overflow in SWF decompression depth handling 3.7 Low -
suricataDebian Suricata lua/tls: null dereference in TlsGetCertInfo 7.5 High -
suricataDebian Suricata smtp/mime: incomplete state reset allows detection bypass 5.3 Medium -
suricataDebian Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder 8.2 High -
suricataDebian Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages 7.5 High -
suricataDebian Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion 6.5 Medium -
suricataDebian Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6 5.3 Medium -
suricataDebian Suricata http2: decompression bomb can cause denial of service in Suricata 7.5 High -
suricataDebian Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock 7.5 High -
suricataDebian Suricata lua: excessive flow variable registration can bypass sandbox 7.5 High -
suricataDebian ikev2: unbounded client transform storage can lead to resource exhaustion 7.5 High -
suricataDebian Suricata ldap: unbounded responses per transaction can lead to resource exhaustion 7.5 High -
suricataDebian Suricata datasets: save to absolute filename can be bypassed when combined with load command 4.4 Medium -
suricataDebian Suricata nfs: unbounded stateful structures can lead to resource exhaustion 7.5 High -
suricataDebian Suricata dnp3: unbounded reassembly can lead to resource exhaustion 7.5 High -
suricataDebian Suricata http2: protocol-change type confusion can lead to denial of service 9.1 Critical -
suricataDebian Suricata lua: sandbox allocation limit not enforced for new allocations 5.9 Medium -
suricataDebian Suricata defrag: missing address-family check can lead to remote crash 7.5 High -
suricataDebian Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load 3.3 Low -
suricataDebian Suricata http1: quadratic Content-Disposition processing can lead to denial of service 7.5 High -
suricataDebian Suricata detect/transform: use-after-free in decompress transforms 5.9 Medium -
suricataDebian Suricata detect/transform: use-after-free in dotprefix transform 5.9 Medium -
suricataDebian Suricata dcerpc: quadratic complexity in dcerpc buffering 7.5 High -
suricataDebian Suricata http2: unbounded resource consumption 7.5 High -
suricataDebian Suricata smtp/mine: quadratic complexity in extracting urls 7.5 High -
suricataDebian Suricata stream: quadratic complexity in stream inspection 7.5 High -
suricataDebian Suricata krb5: quadratic complexity in krb5 buffering 7.5 High -
suricataDebian Suricata tls: null dereference in tls.alpn rule keyword 7.5 High -
suricataDebian Suricata detect/alert: heap-use-after-free on alert queue expansion 7.4 High -
suricataDebian Suricata http1: quadratic complexity in headers parsing over multiple packets 5.3 Medium -
suricataDebian Suricata datasets: stack overflow when saving a set 5.9 Medium -
suricataDebian Suricata eve/alert: http1 xff handling can lead to denial of service 3.7 Low -
suricataDebian Suricata http1: infinite recursion in decompression 7.5 High -
suricataDebian Suricata dnp3: unbounded transaction growth 7.5 High -
suricataDebian Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion 7.5 High -
suricataDebian Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer 7.5 High -
suricataDebian Suricata is vulnerable to a heap buffer overflow on verdict 7.5 High - Show olderLoading…