Openinfosecfoundation Suricata
6 CVEs affecting Openinfosecfoundation Suricata. Latest disclosed: 2017-10-23. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-8954 | Critical | 9.8 | 2017-03-20 | The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusi… |
CVE-2017-15377 | High | 7.5 | 2017-10-23 | In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of Dete… |
CVE-2017-7177 | High | 7.5 | 2017-03-18 | Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. |
CVE-2015-0971 | | 2015-05-14 | The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates. | |
CVE-2014-6603 | | 2014-10-07 | The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (cr… | |
CVE-2013-5919 | | 2014-05-30 | Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. |