CVE-2018-18956

概要

参考情報

• lists.openinfosecfoundation.org/pipermail/oisf-users/2018-November/016316.html · Mailing List
• lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html · Mailing List
• redmine.openinfosecfoundation.org/issues/2658 · Third Party Advisory

suricata のその他の脆弱性

• CVE-2019-17420中 5.3In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature …
• CVE-2019-16411緊急 9.8An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimes…
• CVE-2019-16410緊急 9.1An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to …
• CVE-2019-15699緊急 9.1An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDeco…
• CVE-2019-10056高 7.5An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the funct…