Openinfosecfoundation Suricata vulnerabilities

CVE-2017-15377 [HIGH] CVE-2017-15377: In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafte In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3

CVE-2015-8954 [CRITICAL] CWE-264 CVE-2015-8954: The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from compar The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.

CVE-2017-7177 [HIGH] CWE-358 CVE-2017-7177: Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.

CVE-2015-0971 [MEDIUM] CWE-399 CVE-2015-0971: The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.

CVE-2014-6603 [MEDIUM] CWE-399 CVE-2014-6603: The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote a The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.

CVE-2013-5919 [MEDIUM] CWE-20 CVE-2013-5919: Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed S Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.