Suricata TCP Detection Evasion Security Bypass Vulnerability

Bugtraq ID:	44749
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 09 2010 12:00AM
Updated:	May 07 2015 05:17PM
Credit:	Judy Novak
Vulnerable:
Not Vulnerable:

Suricata TCP Detection Evasion Security Bypass Vulnerability

Suricata is prone to a security-bypass vulnerability.

Successful exploits may allow attackers to bypass detection rules; this may aid in further attacks.

Versions prior to Suricata 1.0.2 are vulnerable.

Suricata TCP Detection Evasion Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Suricata TCP Detection Evasion Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

Suricata TCP Detection Evasion Security Bypass Vulnerability

References:

• Suricata Homepage (Open Information Security Foundation (OISF))
  
• Suricata TCP Evasions (Judy Novak)