Описание
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| suricata | fixed | 1:6.0.4-1 | package | |
| suricata | no-dsa | bullseye | package | |
| suricata | no-dsa | buster | package | |
| suricata | no-dsa | stretch | package |
Примечания
https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942
https://redmine.openinfosecfoundation.org/issues/4569
EPSS
Связанные уязвимости
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю обойти ограничения безопасности и реализовать атаку TCP Reset
ALT-PU-2022-1180: package `suricata` update to version 6.0.4-alt1
EPSS