CVE-2015-0971

概要

参考情報

• suricata-ids.org/2015/05/06/suricata-2-0-8-available · Patch
• debian.org/security/2015/dsa-3254

suricata のその他の脆弱性

• CVE-2017-15377高 7.5In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signatu…
• CVE-2015-8954緊急 9.8The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attacker…
• CVE-2017-7177高 7.5Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
• CVE-2014-6603中 5.0The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a de…
• CVE-2013-5919中 5.0Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.