PT-2017-17559 · Open Information Security Foundation · Suricata

Victor Julien · Published 2017-03-18 · Updated 2018-12-05 · CVE-2017-7177

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 3.2.1

Description The issue is caused by a lack of a check for the IP protocol during fragment matching, leading to an IPv4 defragmentation evasion problem.

Recommendations For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue.

Fix

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

CVE-2017-7177

DLA-1603-1

DLA-865-1

Affected Products

Suricata

References · 22

• https://github.com/inliniac/suricata/commit/4a04f814b15762eb446a5ead4d69d021512df6f8 · Patch
• https://cve.org/CVERecord?id=CVE-2017-7177 · Security Note
• https://bdu.fstec.ru/vul/2018-00261 · Security Note
• https://ubuntu.com/security/CVE-2017-7177 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7177 · Vendor Advisory
• https://security-tracker.debian.org/tracker/DLA-1603-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-7177 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1603-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7177 · Security Note
• https://osv.dev/vulnerability/CVE-2017-7177 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/suricata · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-00358 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15377 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-7177 · Security Note
• https://redmine.openinfosecfoundation.org/issues/2019 · Patch