Поиск уязвимостей
Количество 17
Количество 17
ALT-PU-2022-1180
ALT-PU-2022-1180: package `suricata` update to version 6.0.4-alt1
CVE-2021-35063
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
CVE-2021-35063
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
CVE-2021-35063
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
GHSA-h9v2-m5qx-h268
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
BDU:2022-01686
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с недостатками разграничения доступа, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2026-4777
ALT-PU-2026-4777: package `suricata` update to version 8.0.4-alt1
CVE-2021-45098
An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.
CVE-2021-45098
An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.
CVE-2021-45098
An issue was discovered in Suricata before 6.0.4. It is possible to by ...
CVE-2021-37592
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
CVE-2021-37592
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
CVE-2021-37592
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a cl ...
GHSA-hxgj-p44f-9x32
Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments.
GHSA-cfcf-x7x2-gpf8
An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.
BDU:2023-06805
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю обойти ограничения безопасности и реализовать атаку TCP Reset
BDU:2023-06804
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с недостаточной проверкой хэш-функции, позволяющая нарушителю реализовать атаку TCP Reset
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-1180 ALT-PU-2022-1180: package `suricata` update to version 6.0.4-alt1 | CVSS3: 9.8 | почти 5 лет назад | |
 | CVE-2021-35063 Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." | CVSS3: 7.5 | 2% Низкий | больше 5 лет назад |
 | CVE-2021-35063 Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." | CVSS3: 7.5 | 2% Низкий | больше 5 лет назад |
| CVE-2021-35063 Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." | CVSS3: 7.5 | 2% Низкий | больше 5 лет назад |
| GHSA-h9v2-m5qx-h268 Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." | 2% Низкий | больше 4 лет назад | |
 | BDU:2022-01686 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с недостатками разграничения доступа, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 2% Низкий | больше 5 лет назад |
| ALT-PU-2026-4777 ALT-PU-2026-4777: package `suricata` update to version 8.0.4-alt1 | CVSS3: 9.8 | 8 месяцев назад | |
| CVE-2021-45098 An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action. | CVSS3: 7.5 | 2% Низкий | почти 5 лет назад |
| CVE-2021-45098 An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action. | CVSS3: 7.5 | 2% Низкий | почти 5 лет назад |
| CVE-2021-45098 An issue was discovered in Suricata before 6.0.4. It is possible to by ... | CVSS3: 7.5 | 2% Низкий | почти 5 лет назад |
| CVE-2021-37592 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. | CVSS3: 9.8 | 2% Низкий | почти 5 лет назад |
| CVE-2021-37592 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. | CVSS3: 9.8 | 2% Низкий | почти 5 лет назад |
| CVE-2021-37592 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a cl ... | CVSS3: 9.8 | 2% Низкий | почти 5 лет назад |
| GHSA-hxgj-p44f-9x32 Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments. | CVSS3: 9.8 | 2% Низкий | почти 5 лет назад |
| GHSA-cfcf-x7x2-gpf8 An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action. | CVSS3: 7.5 | 2% Низкий | почти 5 лет назад |
| BDU:2023-06805 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю обойти ограничения безопасности и реализовать атаку TCP Reset | CVSS3: 9.8 | 2% Низкий | больше 5 лет назад |
| BDU:2023-06804 Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с недостаточной проверкой хэш-функции, позволяющая нарушителю реализовать атаку TCP Reset | CVSS3: 7.5 | 2% Низкий | около 5 лет назад |
Уязвимостей на страницу