Описание
Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15.
A flaw was found in Suricata, a network intrusion detection, prevention, and security monitoring engine. A remote attacker could exploit an inefficiency in the Distributed Computing Environment/Remote Procedure Call (DCERPC) buffering mechanism. This could lead to a denial of service (DoS) due to significant performance degradation, impacting the availability of the network monitoring service.
Отчет
Important: A flaw in Suricata's DCERPC buffering mechanism can lead to significant performance degradation, potentially causing a denial of service for the network monitoring service. This affects Red Hat systems running Suricata when processing Distributed Computing Environment/Remote Procedure Call (DCERPC) traffic.
Меры по смягчению последствий
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15.
Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15.
Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15 ...
Уязвимость парсера dcerpc системы обнаружения и предотвращения вторжений Suricata, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3