VDB
CVE-2018-14568
CVE-2018-14568
PUBLISHED
CVSS 7.5 HIGH
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).
EPSS 2.00% · 80.6th percentile
Risk Scores
CVSS 3.0
7.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
2.00%
80.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:18.04:LTS | suricata | 0, 3.2-2ubuntu3 |
| Ubuntu:16.04:LTS | suricata | 2.0.10-2, 3.0-1, 0 |
Timeline
- Jul 23, 2018 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 25, 2021 EPSS Score
- Oct 28, 2021 EPSS Score
- Mar 3, 2022 EPSS Score
- May 5, 2022 EPSS Score
- Jul 7, 2022 EPSS Score
- Sep 9, 2022 EPSS Score
- Nov 12, 2022 EPSS Score
- Jan 14, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
References
- https://github.com/kirillwow/ids_bypass third-party-advisory
- https://redmine.openinfosecfoundation.org/issues/2501 third-party-advisory
- https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/ third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2018-14568 third-party-advisory
- https://ubuntu.com/security/CVE-2018-14568 advisory
- https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345 fix