CVE-2014-6603 - The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write

Back Back to CVE browser

MEDIUM

The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write

Published Oct 7, 2014

5.0

MEDIUM

CVSS 2.0

EPSS 3.24%

Description

The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-399

References (8)

http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139630.html
vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139821.html
vendor-advisoryx_refsource_FEDORA
http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html
x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2014/Sep/79
mailing-listx_refsource_FULLDISCExploit
http://www.securityfocus.com/archive/1/533515/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/70083
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6482
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/96157
vdb-entryx_refsource_XF

Link	Providers	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139630.html		vendor-advisoryx_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2014-October/139821.html		vendor-advisoryx_refsource_FEDORA
http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html		x_refsource_MISCExploit
http://seclists.org/fulldisclosure/2014/Sep/79		mailing-listx_refsource_FULLDISCExploit
http://www.securityfocus.com/archive/1/533515/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/70083		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6482		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/96157		vdb-entryx_refsource_XF