2014-10-11
ALT-BU-2014-3042-1
Branch sisyphus update bulletin.
Closed bugs
Надо исправить тип лицензии в спеке
Closed vulnerabilities
Published: 2014-10-07
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-6603
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
Severity: MEDIUM (5.0)
References:
- FEDORA-2014-11302
- FEDORA-2014-11302
- FEDORA-2014-11462
- FEDORA-2014-11462
- http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html
- http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html
- 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser
- 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser
- 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser
- 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser
- 70083
- 70083
- suricata-cve20146603-dos(96157)
- suricata-cve20146603-dos(96157)