PT-2015-7892 · Open Information Security Foundation · Suricata

Published 2015-04-09 · Updated 2015-04-09

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Suricata (affected versions not specified)

Description A security issue was reported in the libhtp handling of streams in error state, which could lead to a NULL pointer dereference and cause the caller to crash. Suricata, an Intrusion Detection System that embeds libhtp, is one of the affected components.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2015-0135

Affected Products

Suricata

References · 6

• https://lists.fedoraproject.org/pipermail/package-announce/2015-January/148322.html · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0135 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0135.html · Security Note
• https://github.com/OISF/libhtp/pull/82 · Note
• https://bugs.mageia.org/show_bug.cgi?id=15086 · Note
• https://redmine.openinfosecfoundation.org/issues/1272 · Note