suricata vulnerabilities (Debian)
116 vulnerabilities.
suricataDebianSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable7.5 HighsuricataDebianSuricata is vulnerable to a stack overflow on larger compressed data7.5 HighsuricataDebianSuricata is vulnerable to a stack overflow from big content-type7.5 HighsuricataDebianSuricata is vulnerable to a null deref when used with base64_data7.5 HighsuricataDebianSuricata is vulnerable to unbounded memory growth for decompression7.5 HighsuricataDebianSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets7.5 HighsuricataDebianSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation7.5 HighsuricataDebianSuricata decode_base64: signature can do large memory allocation6.2 MediumsuricataDebianSuricata datasets: ruleset declared settings can lead to resource starvation6.2 MediumsuricataDebianSuricata af-packet: defrag option can lead to truncated packets affecting visibility7.5 HighsuricataDebianSuricata pcre: negated pcr can cause infinite loop6.2 MediumsuricataDebianSuricata generic detection bypass using TCP urgent support7.5 HighsuricataDebianSuricata oversized resource names utilizing DNS name compression can lead to resource starvation7.5 HighsuricataDebianSuricata segfault on StreamingBufferSlideToOffsetWithRegions5.9 MediumsuricataDebianSuricata oversized bpf file can lead to buffer overflow3.3 LowsuricataDebianSuricata allows stack overflow in transforms7.5 HighsuricataDebianSuricata ja4: invalid alpn leads to panic7.5 HighsuricataDebianSuricata http/byte-ranges: missing hashtable random seed leads to potential DoS7.5 HighsuricataDebianSuricata datasets: missing hashtable random seed leads to potential DoS7.5 HighsuricataDebianSuricata defrag: off by one can lead to policy bypass5.3 MediumsuricataDebianSuricata detect/datasets: reachable assertion with unimplemented rule option7.5 HighsuricataDebianSuricata http/range: NULL-ptr deref when http.memcap is reached7.5 HighsuricataDebianSuricata http2: oom from duplicate headers7.5 HighsuricataDebianSuricata modbus: txs without responses are never freed7.5 HighsuricataDebianSuricata defrag: IP ID reuse can lead to policy bypass5.3 MediumsuricataDebianSuricata's defrag contains various issues leading to policy bypass5.3 MediumsuricataDebianSuricata's base64 contains an out of bounds write5.3 MediumsuricataDebianSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvation7.5 HighsuricataDebianSuricata uses excessive resource use in malformed ssh traffic parsing7.5 HighsuricataDebianSuricata http2: header handling evasion5.3 MediumsuricataDebianSuricata http: heap use after free with http.request_header and http.response_header keywords7.1 HighsuricataDebiancrafted traffic can cause denial of service7.5 HighsuricataDebianSuricata's pgsql: memory exhaustion use on record parsing7.5 HighsuricataDebianIn Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able...9.8 CriticalsuricataDebianIn Suricata before 6.0.13 (when there is an adversary who controls an external source of rules),...7.5 HighsuricataDebianAn issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based...7.5 HighsuricataDebianSuricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP...9.8 CriticalsuricataDebianSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."7.5 HighsuricataDebianAn issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based...7.5 HighsuricataDebianAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...9.1 CriticalsuricataDebianAn issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the...9.1 CriticalsuricataDebianAn issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid...9.8 CriticalsuricataDebianAn issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 ...9.1 CriticalsuricataDebianAn issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network...7.5 HighsuricataDebianAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...7.5 HighsuricataDebianAn issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for...7.5 HighsuricataDebianAn issue was discovered in Suricata 4.1.3. If the network packet does not have the right length,...7.5 HighsuricataDebianAn issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an...7.5 HighsuricataDebianOpen Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of...7.5 HighsuricataDebianOpen Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of...7.5 High- Show moreLoading…