CVE-2021-37592

CRITICAL 9.8CVE-2021-37592 · Published 19/11/2021 · updated 17/06/2026

In short

CVE-2021-37592 is a CRITICAL (CVSS 9.8) vulnerability affecting suricata (oisf).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.8% of all vulnerabilities.
Fix: update to 6.0.4, 5.0.8 or later.

Package	Affected versions	Patched versions
suricata oisf	`≥ 6.0.0, < 6.0.4< 5.0.8`	`6.0.45.0.8`

Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

≥ 6.0.0, < 6.0.4< 5.0.8

6.0.45.0.8

More vulnerabilities in suricata

See all →