CVE-2013-5919: Input Validation
Published May 30, 2014
·Updated
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
Affected Software
36 affected components
Openinfosecfoundation Suricata<=1.4.5
Openinfosecfoundation Suricata=1.3-beta_2
Openinfosecfoundation Suricata=1.3-beta_3
Openinfosecfoundation Suricata=1.3-rc_1
Openinfosecfoundation Suricata=1.4
Openinfosecfoundation Suricata=1.4-beta_1
Openinfosecfoundation Suricata=1.4-beta_2
Openinfosecfoundation Suricata=1.4-beta_3
Openinfosecfoundation Suricata=1.4-rc_1
Suricata-ids Suricata=1.3.1
Suricata-ids Suricata=1.3.2
Suricata-ids Suricata=1.3.3
Suricata-ids Suricata=1.3.4
Suricata-ids Suricata=1.3.5
Suricata-ids Suricata=1.3.6
Suricata-ids Suricata=1.4.1
Suricata-ids Suricata=1.4.2
Suricata-ids Suricata=1.4.3
Suricata-ids Suricata=1.4.4
OISF Suricata=1.3-beta2
OISF Suricata=1.3-beta3
OISF Suricata=1.3-rc1
OISF Suricata=1.3.1
OISF Suricata=1.3.2
OISF Suricata=1.3.3
OISF Suricata=1.3.4
OISF Suricata=1.3.5
OISF Suricata=1.3.6
OISF Suricata=1.4-beta1
OISF Suricata=1.4-beta2
OISF Suricata=1.4-beta3
OISF Suricata=1.4-rc1
OISF Suricata=1.4.1
OISF Suricata=1.4.2
OISF Suricata=1.4.3
OISF Suricata=1.4.4
Remediation
Patch Available
Event History
May 30, 2014
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
via NVD·02:55 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-5919?
CVE-2013-5919 is classified as a denial of service vulnerability that allows remote attackers to crash Suricata.
2
How do I fix CVE-2013-5919?
To mitigate CVE-2013-5919, upgrade Suricata to version 1.4.6 or later.
3
What versions of Suricata are affected by CVE-2013-5919?
CVE-2013-5919 affects Suricata versions prior to 1.4.6, including 1.4.5 and earlier beta and release candidates.
4
Can CVE-2013-5919 be exploited remotely?
Yes, CVE-2013-5919 can be exploited remotely through the use of a malformed SSL record.
5
What are the consequences of exploiting CVE-2013-5919?
Exploiting CVE-2013-5919 can cause the Suricata service to crash, resulting in a denial of service.