Priority LOW 27
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the http_header signature to not alert on a response with a single \r\n ending.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01355 · Published 2019-10-09 · No fix listed CWE-459
Priority MEDIUM 43
An issue was discovered in Suricata 4.1.4.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02139 · Published 2019-09-24 · No fix listed CWE-125
Priority MEDIUM 46
An issue was discovered in Suricata 4.1.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02027 · Published 2019-09-24 · No fix listed CWE-125
Priority MEDIUM 43
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01645 · Published 2019-09-24 · No fix listed CWE-125
Priority LOW 36
An issue was discovered in Suricata 4.1.3.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01398 · Published 2019-08-28 · No fix listed CWE-787
Priority LOW 36
An issue was discovered in Suricata 4.1.3.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01458 · Published 2019-08-28 · No fix listed CWE-190
Priority LOW 36
An issue was discovered in Suricata 4.1.3.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01398 · Published 2019-08-28 · No fix listed CWE-191
Priority LOW 37
An issue was discovered in Suricata 4.1.3.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02114 · Published 2019-08-28 · No fix listed CWE-707
Priority LOW 37
An issue was discovered in Suricata 4.1.3.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02129 · Published 2019-08-28 · No fix listed CWE-754
Priority MEDIUM 45
An issue was discovered in Suricata 4.1.x before 4.1.4.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01711 · Published 2019-05-13 · No fix listed CWE-125
Priority LOW 38
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the…
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.02818 · Published 2018-11-05 · No fix listed CWE-119
Priority LOW 37
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01999 · Published 2018-07-23 · No fix listed
Priority LOW 28
An issue was discovered in Suricata before 3.1.2.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02091 · Published 2018-07-23 · No fix listed CWE-20
Priority MEDIUM 45
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c.
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.23687 · Published 2018-02-07 · No fix listed CWE-693
THREATIST.IORead the docs