Suricata · Suricata · CVE-2021-37592
**Name of the Vulnerable Software and Affected Versions**
Suricata versions 5.0.0 through 5.0.7
Suricata versions 6.0.0 through 6.0.3
**Description**
The issue is related to a buffer overflow in memory due to insufficient checking of FIN, SYN, and ACK parameter values when processing packets. This can be exploited by a remote attacker to bypass security restrictions and implement a TCP Reset attack. The problem arises when a client with a crafted TCP/IP stack sends a specific sequence of segments, allowing for TCP evasion.
**Recommendations**
For Suricata versions 5.0.0 through 5.0.7, update to version 5.0.8 or later.
For Suricata versions 6.0.0 through 6.0.3, update to version 6.0.4 or later.