PT-2014-7297 · Open Information Security Foundation+1 · Suricata+1
Publicado
2014-10-07
·
Atualizado
2018-10-09
·
CVE-2014-6603
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
Suricata versions prior to 2.0.4
Description
The issue allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner. This is triggered by the SSHParseBanner function in the SSH parser, which can cause a large memory allocation or an out-of-bounds write.
Recommendations
For versions prior to 2.0.4, update to version 2.0.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the SSH parser to minimize the risk of exploitation.
Exploit
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Suricata