PT-2018-4894 · Open Information Security Foundation · Suricata

Victor Julien · Published 2018-07-23 · Updated 2025-07-28 · CVE-2016-10728

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 3.1.2

Description An issue was discovered where receiving an ICMPv4 error packet as the first packet on a flow in the to client direction confuses the rule grouping lookup logic. This causes the toclient inspection to continue with the wrong rule group, potentially leading to missed detection.

Recommendations For versions prior to 3.1.2, update to version 3.1.2 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-10728

DLA-1508-1

OPENSUSE-SU-2025:15394-1

Affected Products

Suricata

References · 43

• 🔥 https://github.com/kirillwow/ids_bypass · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-10728 · Security Note
• https://ubuntu.com/security/CVE-2016-10728 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2016-10728 · Vendor Advisory
• https://suricata-ids.org/2016/09/07/suricata-3-1-2-released · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10728 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-10728 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-10728 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-10728 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-1508-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2024-47522 · Note
• https://suse.com/security/cve/CVE-2024-38534 · Note
• https://suse.com/security/cve/CVE-2024-55629 · Note
• https://suse.com/security/cve/CVE-2024-47187 · Note