PatchTheCVEopeninfosecfoundation vulnerabilities
Recent CVEs affecting openinfosecfoundation products. 6 tracked.
openinfosecfoundation has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 6. Most recent: 2017-10-23. Highest priority: CVE-2015-8954 (score 61/100).
- CVE-2017-7177 HIGH 7.5 UPGRADE Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol
- CVE-2017-15377 HIGH 7.5 UPGRADE In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network
- CVE-2015-8954 CRITICAL 9.8 UPGRADE The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, whi
- CVE-2015-0971 MEDIUM 5.0 MITIGATE UPGRADE The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vecto
- CVE-2014-6603 MEDIUM 5.0 UPGRADE The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers t
- CVE-2013-5919 MEDIUM 5.0 DOWNGRADE UPGRADE Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
FAQ
How do I fix openinfosecfoundation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is openinfosecfoundation being exploited right now?
None of the tracked openinfosecfoundation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which openinfosecfoundation CVE should I patch first?
CVE-2015-8954 currently ranks highest (61/100): The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, whi.