CVE-2016-10728

概要

参考情報

• kirillwow/ids_bypass · Exploit
• lists.debian.org/debian-lts-announce/2018/09/msg00019.html · Third Party Advisory
• redmine.openinfosecfoundation.org/issues/1880 · Third Party Advisory
• suricata-ids.org/2016/09/07/suricata-3-1-2-released · Vendor Advisory

suricata のその他の脆弱性

• CVE-2019-17420中 5.3In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature …
• CVE-2019-16411緊急 9.8An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimes…
• CVE-2019-16410緊急 9.1An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to …
• CVE-2019-15699緊急 9.1An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDeco…
• CVE-2019-10056高 7.5An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the funct…