CVE-2019-16410

概要

参考情報

• lists.openinfosecfoundation.org/pipermail/oisf-announce · Third Party Advisory
• suricata-ids.org/2019/09/24/suricata-4-1-5-released · Release Notes
• code-intelligence.com/cve-2019-16410

suricata のその他の脆弱性

• CVE-2019-17420中 5.3In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature …
• CVE-2019-16411緊急 9.8An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimes…
• CVE-2019-15699緊急 9.1An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDeco…
• CVE-2019-10056高 7.5An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the funct…
• CVE-2019-10055高 7.5An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a cras…