| Package | Affected versions | Patched versions |
|---|---|---|
| suricata | ≥ 8.0.0, < 8.0.6< 7.0.17 | 8.0.67.0.17 |
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the Windows service installation and parameter-update logic in src/win32-service.c can pass an unquoted service ImagePath to CreateServiceA. When Suricata is installed below a path containing spaces and an earlier path component is writable by a local low-privileged attacker, Windows can execute an attacker-controlled program as LocalSystem, resulting in local privilege escalation. This issue is fixed in versions 8.0.6 and 7.0.17.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free