Read the docs

OISF

Records108All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high73CVSS 7.0–8.9

Exploited now

OISF records in CISA KEV

No OISF vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Suricata 100 records HIGH Libhtp 7 records MEDIUM Suricata-update 1 record MEDIUM

Records

1 record in Suricata-update · all components

TI-2018-15817 CVE-2018-1000167 · GHSA-7c4h-w765-6pwg

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability…

Priority MEDIUM 41

OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04037 Published 2018-04-18 Fixed in 1.0.0b1 CWE-502
Open these records in search →