Описание
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.
A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) engine. An attacker can exploit an inefficiency in the Kerberos 5 (KRB5) buffering mechanism by sending specially crafted network traffic. This can lead to significant performance degradation, effectively causing a Denial of Service (DoS) for the affected system.
Отчет
This Important flaw in Suricata, a network intrusion detection and prevention system, stems from an inefficiency in its Kerberos 5 (KRB5) buffering mechanism. An unauthenticated attacker can send specially crafted network traffic to a system running Suricata, leading to significant performance degradation and a denial of service. This affects Suricata deployments within Red Hat Community Projects.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, inefficiency in KRB5 buffering can lead to performance degradation. This issue has been patched in versions 7.0.15 and 8.0.4.
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.1 ...
Уязвимость парсера krb5 системы обнаружения и предотвращения вторжений Suricata, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3