openinfosecfoundation kayıtları
openinfosecfoundation üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-399 Resource Management Errors2
- CWE-20 Improper Input Validation1
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-358 Improperly Implemented Security Check for Standard1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2015-8954İstismar yok | The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackeropeninfosecfoundation · suricata · CWE-264 | Kritik9,8 | — | %3,2 | 20 Mar 2017 |
31İzleyin | CVE-2017-15377İstismar yok | In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signatuopeninfosecfoundation · suricata | Yüksek7,5 | — | %1,9 | 23 Eki 2017 |
30İzleyin | CVE-2017-7177İstismar yok | Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.openinfosecfoundation · suricata · CWE-358 | Yüksek7,5 | — | %1,2 | 18 Mar 2017 |
21İzleyin | CVE-2014-6603İstismar yok | The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a deopeninfosecfoundation · suricata · CWE-399 | Orta5,0 | — | %2,8 | 7 Eki 2014 |
20İzleyin | CVE-2013-5919İstismar yok | Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.oisf · suricata · CWE-20 | Orta5,0 | — | %1,6 | 30 May 2014 |
20İzleyin | CVE-2015-0971İstismar yok | The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificdebian · debian linux · CWE-399 | Orta5,0 | — | %1,1 | 14 May 2015 |
- CVE-2015-895440Planlayın
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attacker
KritikCVSS 9,8İstismar yokEPSS %3openinfosecfoundation · suricata20 Mar 2017
- CVE-2017-1537731İzleyin
In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signatu
YüksekCVSS 7,5İstismar yokEPSS %1openinfosecfoundation · suricata23 Eki 2017
- CVE-2017-717730İzleyin
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
YüksekCVSS 7,5İstismar yokEPSS %1openinfosecfoundation · suricata18 Mar 2017
- CVE-2014-660321İzleyin
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a de
OrtaCVSS 5,0İstismar yokEPSS %2openinfosecfoundation · suricata7 Eki 2014
- CVE-2013-591920İzleyin
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
OrtaCVSS 5,0İstismar yokEPSS %1oisf · suricata30 May 2014
- CVE-2015-097120İzleyin
The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certific
OrtaCVSS 5,0İstismar yokEPSS %1debian · debian linux14 May 2015