Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-42j3-j7r2-vj2g

Опубликовано: 19 июн. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

EPSS

Процентиль: 67%
0.00551
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 2 лет назад

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

CVSS3: 9.8
nvd
больше 2 лет назад

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

CVSS3: 9.8
debian
больше 2 лет назад

In Suricata before 6.0.13, an adversary who controls an external sourc ...

CVSS3: 9.8
fstec
больше 2 лет назад

Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 67%
0.00551
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94