CVE-2015-8954

概要

参考情報

• bugs.debian.org/cgi-bin/bugreport.cgi · Third Party Advisory
• redmine.openinfosecfoundation.org/issues/1364 · Third Party Advisory
• suricata-ids.org/2015/01/15/suricata-2-0-6-available · Release Notes

suricata のその他の脆弱性

• CVE-2017-15377高 7.5In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signatu…
• CVE-2017-7177高 7.5Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
• CVE-2015-0971中 5.0The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certific…
• CVE-2014-6603中 5.0The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a de…
• CVE-2013-5919中 5.0Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.