| Package | Affected versions | Patched versions |
|---|---|---|
| suricata | ≥ 4.0.0, < 4.0.6 | 4.0.6 |
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free