Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c (https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b). The attack vector is: An attacker can trigger the vulnerability by a specifically crafted network TCP session. The fixed version is: 4.1.3.
References
Link | Resource |
---|---|
https://github.com/OISF/suricata/pull/3625 | Third Party Advisory |
https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b | Patch Third Party Advisory |
https://redmine.openinfosecfoundation.org/issues/2770 | Exploit Vendor Advisory |
https://github.com/OISF/suricata/pull/3625 | Third Party Advisory |
https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b | Patch Third Party Advisory |
https://redmine.openinfosecfoundation.org/issues/2770 | Exploit Vendor Advisory |
Configurations
History
21 Nov 2024, 04:18
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/OISF/suricata/pull/3625 - Third Party Advisory | |
References | () https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b - Patch, Third Party Advisory | |
References | () https://redmine.openinfosecfoundation.org/issues/2770 - Exploit, Vendor Advisory |
Information
Published : 2019-07-18 19:15
Updated : 2024-11-21 04:18
NVD link : CVE-2019-1010279
Mitre link : CVE-2019-1010279
CVE.ORG link : CVE-2019-1010279
JSON object : View
Products Affected
oisf
- suricata
CWE
CWE-347
Improper Verification of Cryptographic Signature