PT-2018-4894 · Open Information Security Foundation · Suricata

Victor Julien · Publicado 2018-07-23 · Atualizado 2025-07-28 · CVE-2016-10728

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 3.1.2

Description An issue was discovered where receiving an ICMPv4 error packet as the first packet on a flow in the to client direction confuses the rule grouping lookup logic. This causes the toclient inspection to continue with the wrong rule group, potentially leading to missed detection.

Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-10728

DLA-1508-1

OPENSUSE-SU-2025:15394-1

Produtos afetados

Suricata

Referências · 43

• 🔥 https://github.com/kirillwow/ids_bypass · Exploit
• https://suse.com/security/cve/CVE-2024-47522 · Nota
• https://suse.com/security/cve/CVE-2024-38534 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2024-55629 · Nota
• https://suse.com/security/cve/CVE-2024-47187 · Nota
• https://lists.debian.org/debian-lts-announce/2018/09/msg00019.html · Nota
• https://cve.org/CVERecord?id=CVE-2016-10728 · Nota de Segurança
• https://suse.com/security/cve/CVE-2024-55627 · Nota
• https://suse.com/security/cve/CVE-2024-45797 · Nota
• https://suse.com/security/cve/CVE-2024-38535 · Nota
• https://suse.com/security/cve/CVE-2019-10050 · Nota
• https://suse.com/security/cve/CVE-2024-45795 · Nota
• https://suse.com/security/cve/CVE-2019-10053 · Nota
• https://ubuntu.com/security/CVE-2016-10728 · Aviso do Fabricante