Resource Management Errors Affecting suricata package, versions [,2.0.4)


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.54% (67th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-UNMANAGED-SURICATA-2384320
  • published26 Jan 2022
  • disclosed7 Oct 2014
  • creditUnknown

Introduced: 7 Oct 2014

CVE-2014-6603  (opens in a new tab)
CWE-399  (opens in a new tab)

How to fix?

Upgrade suricata to version 2.0.4 or higher.

Overview

Affected versions of this package are vulnerable to Resource Management Errors. The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.

CVSS Base Scores

version 3.1