CVE-2019-10054

概要

参考情報

• redmine.openinfosecfoundation.org/issues/2943 · Exploit
• suricata-ids.org/2019/04/30/suricata-4-1-4-released · Release Notes

suricata のその他の脆弱性

• CVE-2019-17420中 5.3In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature …
• CVE-2019-16411緊急 9.8An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimes…
• CVE-2019-16410緊急 9.1An issue was discovered in Suricata 4.1.4. By sending multiple fragmented IPv4 packets, the function Defrag4Reassemble in defrag.c tries to …
• CVE-2019-15699緊急 9.1An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDeco…
• CVE-2019-10056高 7.5An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the funct…