Описание
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.4.5 (включая)
Одно из
cpe:2.3:a:oisf:suricata:1.3:beta2:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3:beta3:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3:rc1:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.1:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.2:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.3:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.4:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.5:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.3.6:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4:beta1:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4:beta2:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4:beta3:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4:rc1:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4.1:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4.2:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4.3:*:*:*:*:*:*:*
cpe:2.3:a:oisf:suricata:1.4.4:*:*:*:*:*:*:*
cpe:2.3:a:openinfosecfoundation:suricata:*:*:*:*:*:*:*:*
cpe:2.3:a:openinfosecfoundation:suricata:1.4:*:*:*:*:*:*:*
EPSS
Процентиль: 76%
0.00935
Низкий
5 Medium
CVSS2
Дефекты
CWE-20
Связанные уязвимости
ubuntu
больше 11 лет назад
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
debian
больше 11 лет назад
Suricata before 1.4.6 allows remote attackers to cause a denial of ser ...
github
больше 3 лет назад
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
EPSS
Процентиль: 76%
0.00935
Низкий
5 Medium
CVSS2
Дефекты
CWE-20