CVE-2018-10242 — Out-of-bounds Read in Suricata

CWE-125 — Out-of-bounds Read6 documents6 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 38.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oisf SuricataDebian Linux
Timeline
PublishedApr 4
Latest updateMay 14

Description

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages2 packages

▶Debianoisf/suricata< 1:4.0.5-1+3
▶NVDoisf/suricata4.0.4

Also affects: Debian Linux 8.0

🔴Vulnerability Details

3
GHSA
GHSA-xrxh-g8jf-mf2m: Suricata version 4↗2022-05-14
▶
CVEList
CVE-2018-10242: Suricata version 4↗2019-04-04
▶
OSV
CVE-2018-10242: Suricata version 4↗2019-04-04
▶

📋Vendor Advisories

1
Debian
CVE-2018-10242: suricata - Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malf...↗2018
▶

💬Community

1
Bugzilla
CVE-2018-10242 suricata: incorrect handling of SSH parsing banner leads to out-of-bound read↗2019-04-05
▶
CVE-2018-10242 — Out-of-bounds Read in Oisf Suricata | cvebase