Skip to content
Suricata-ids vulnerabilities
Newest
-
oisf libhtp, suricata-ids suricata +1 more
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol...
CVE-2019-17420
Fix available
5.3 Medium
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the...
CVE-2019-16410
Fix available
9.1 Critical
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid...
CVE-2019-16411
Fix available
9.8 Critical
-
suricata-ids suricata
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 ...
CVE-2019-15699
Fix available
9.1 Critical
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network...
CVE-2019-10056
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the...
CVE-2019-10055
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for...
CVE-2019-10054
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length,...
CVE-2019-10052
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an...
CVE-2019-10051
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function...
CVE-2019-10053
Fix available
9.8 Critical
-
suricata-ids suricata
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote...
CVE-2018-18956
Fix available
7.5 High
-
suricata-ids suricata
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows...
CVE-2018-14568
Fix available
7.5 High
-
suricata-ids suricata
An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the...
CVE-2016-10728
Fix available
5.3 Medium
-
debian linux, suricata-ids suricata +1 more
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream...
CVE-2018-6794
Public exploitFix available
EPSS 23.7%
5.3 Medium