PT-2018-12583 · Open Information Security Foundation+1 · Suricata+1

Ajaxtpm · Publicado 2018-07-23 · Atualizado 2025-07-28 · CVE-2018-14568

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 4.0.5

Description The issue allows for detection bypass due to the way Suricata handles TCP RST packets from servers. Specifically, when a TCP RST is received from a server, Suricata stops inspecting the TCP stream. However, Windows TCP clients continue processing TCP data that arrives shortly after the RST as if the RST had not been received. This discrepancy enables potential bypass of detection mechanisms.

Recommendations For Suricata versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

ALT-PU-2020-3551

ALT-PU-2021-2056

CVE-2018-14568

OPENSUSE-SU-2025:15394-1

Produtos afetados

Alt Linux

Suricata

Referências · 42

• 🔥 https://github.com/kirillwow/ids_bypass · Exploit
• 🔥 https://redmine.openinfosecfoundation.org/issues/2501 · Exploit
• https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345 · Correção
• https://suse.com/security/cve/CVE-2024-47522 · Nota
• https://suse.com/security/cve/CVE-2024-38534 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-47187 · Nota
• https://suse.com/security/cve/CVE-2024-55629 · Nota
• https://cve.org/CVERecord?id=CVE-2018-14568 · Nota de Segurança
• https://suse.com/security/cve/CVE-2024-55627 · Nota
• https://suse.com/security/cve/CVE-2024-45797 · Nota
• https://suse.com/security/cve/CVE-2024-38535 · Nota
• https://suse.com/security/cve/CVE-2019-10050 · Nota
• https://suse.com/security/cve/CVE-2024-45795 · Nota
• https://suse.com/security/cve/CVE-2019-10053 · Nota