suricata vulnerabilities (Ubuntu)
116 vulnerabilities.
suricataUbuntuSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable7.5 HighsuricataUbuntuSuricata is vulnerable to a stack overflow on larger compressed data7.5 HighsuricataUbuntuSuricata is vulnerable to a stack overflow from big content-type7.5 HighsuricataUbuntuSuricata is vulnerable to a null deref when used with base64_data7.5 HighsuricataUbuntuSuricata is vulnerable to unbounded memory growth for decompression7.5 HighsuricataUbuntuSuricata: Keyword tls.subjectaltname can lead to NULL-ptr deref7.5 HighsuricataUbuntuSuricata: Stack buffer overflow in rule parser when processing long keywords with transforms6.2 MediumsuricataUbuntuSuricata's improper use of entropy keyword can lead to a NULL-ptr deref7.5 HighsuricataUbuntuSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets7.5 HighsuricataUbuntuSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation7.5 HighsuricataUbuntuSuricata decode_base64: signature can do large memory allocation6.2 MediumsuricataUbuntuSuricata datasets: ruleset declared settings can lead to resource starvation6.2 MediumsuricataUbuntuSuricata af-packet: defrag option can lead to truncated packets affecting visibility7.5 HighsuricataUbuntuSuricata pcre: negated pcr can cause infinite loop6.2 MediumsuricataUbuntuSuricata generic detection bypass using TCP urgent support7.5 HighsuricataUbuntuSuricata oversized resource names utilizing DNS name compression can lead to resource starvation7.5 HighsuricataUbuntuSuricata segfault on StreamingBufferSlideToOffsetWithRegions5.9 MediumsuricataUbuntuSuricata oversized bpf file can lead to buffer overflow3.3 LowsuricataUbuntuSuricata allows stack overflow in transforms7.5 HighsuricataUbuntuSuricata ja4: invalid alpn leads to panic7.5 HighsuricataUbuntuSuricata http/byte-ranges: missing hashtable random seed leads to potential DoS7.5 HighsuricataUbuntuSuricata datasets: missing hashtable random seed leads to potential DoS7.5 HighsuricataUbuntuSuricata defrag: off by one can lead to policy bypass5.3 MediumsuricataUbuntuSuricata detect/datasets: reachable assertion with unimplemented rule option7.5 HighsuricataUbuntuSuricata http/range: NULL-ptr deref when http.memcap is reached7.5 HighsuricataUbuntuSuricata http2: oom from duplicate headers7.5 HighsuricataUbuntuSuricata modbus: txs without responses are never freed7.5 HighsuricataUbuntuSuricata defrag: IP ID reuse can lead to policy bypass5.3 MediumsuricataUbuntuSuricata's defrag contains various issues leading to policy bypass5.3 MediumsuricataUbuntuSuricata's base64 contains an out of bounds write5.3 MediumsuricataUbuntuSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvation7.5 HighsuricataUbuntuSuricata uses excessive resource use in malformed ssh traffic parsing7.5 HighsuricataUbuntuSuricata http2: header handling evasion5.3 MediumsuricataUbuntuSuricata http: heap use after free with http.request_header and http.response_header keywords7.1 HighsuricataUbuntucrafted traffic can cause denial of service7.5 HighsuricataUbuntuSuricata's pgsql: memory exhaustion use on record parsing7.5 HighsuricataUbuntuIn Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able...9.8 CriticalsuricataUbuntuIn Suricata before 6.0.13 (when there is an adversary who controls an external source of rules),...7.5 HighsuricataUbuntuAn issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based...7.5 HighsuricataUbuntuSuricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP...9.8 CriticalsuricataUbuntuSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."7.5 HighsuricataUbuntuAn issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based...7.5 HighsuricataUbuntuAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...9.1 CriticalsuricataUbuntuAn issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the...9.1 CriticalsuricataUbuntuAn issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid...9.8 CriticalsuricataUbuntuAn issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 ...9.1 CriticalsuricataUbuntuAn issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network...7.5 HighsuricataUbuntuAn issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...7.5 HighsuricataUbuntuAn issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for...7.5 HighsuricataUbuntuAn issue was discovered in Suricata 4.1.3. If the network packet does not have the right length,...7.5 High- Show moreLoading…