Oisf
Page 2 of 2 — Oisf CVEs from a corpus of 108, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-1010251 | High | 7.5 | 2019-07-18 | Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass. The impact is: An attacker can e… |
CVE-2019-10050 | High | 7.5 | 2019-05-13 | A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of s… |
CVE-2018-10244 | Critical | 9.8 | 2019-04-04 | Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data beca… |
CVE-2018-10243 | Critical | 9.8 | 2019-04-04 | htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest hea… |
CVE-2018-10242 | High | 7.5 | 2019-04-04 | Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data b… |
CVE-2018-1000167 | High | 7.8 | 2018-04-18 | OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: conf… |
CVE-2015-0928 | High | 7.5 | 2017-08-28 | libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference). |
CVE-2013-5919 | | 2014-05-30 | Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. |