CVE-2018-10242 - Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner

Back Back to CVE browser

HIGH

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner

Published Apr 4, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.56%

Description

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2316
Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00010.html
mailing-listx_refsource_MLISTThird Party Advisory
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/
x_refsource_CONFIRMRelease NotesVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-2316		Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00010.html		mailing-listx_refsource_MLISTThird Party Advisory
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/		x_refsource_CONFIRMRelease NotesVendor Advisory