Описание
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.
A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) engine. A remote attacker could exploit a quadratic complexity issue when searching for URLs in MIME-encoded messages over SMTP. This could lead to a significant performance impact, potentially causing a Denial of Service (DoS) condition for the affected system.
Отчет
This Important flaw in Suricata affects versions 8.0.0 through 8.0.3. A remote attacker can trigger a Denial of Service by sending specially crafted MIME-encoded SMTP messages, leading to a quadratic complexity issue during URL processing. This can significantly degrade performance and impact the availability of the Suricata engine.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, there is a quadratic complexity issue when searching for URLs in mime encoded messages over SMTP leading to a performance impact. This issue has been patched in version 8.0.4.
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to b ...
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с алгоритмической сложностью, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3