VDB
BDU%3A2024-01183
BDU%3A2024-01183
PUBLISHED
CVSS 7.099999904632568 HIGH
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с использованием памяти после её освобождения, позволяющая нарушителю оказать влияние на целостность и доступность защищаемой информации
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora Project, Open Information Security Foundation, АО «Лаборатория Касперского» | Fedora, Suricata, Kaspersky Anti Targeted Attack Platform (запись в едином реестре российских программ №185), Kaspersky Endpoint Detection and Response | |
| OISF | suricata | >= 7.0.0, < 7.0.3 |
| oisf | suricata | 7.0.0 |
Timeline
- Feb 13, 2024 CVE Published
- Mar 14, 2024 PoC Published
- Mar 27, 2024 CVE Updated
References
- https://github.com/OISF/suricata/security/advisories/GHSA-qxj6-hr2p-mmc7 url
- https://github.com/OISF/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f url
- https://redmine.openinfosecfoundation.org/issues/6657 url
- https://support.kaspersky.com/vulnerability/list-of-advisories/12430#260324 url
- https://suricata.io/2024/02/08/suricata-7-0-3-and-6-0-16-released/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ url