CVE-2014-6603: Medium severity suricata vulnerability
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6603?
CVE-2014-6603 has a moderate severity rating due to the potential for denial of service and remote attack risks.
How do I fix CVE-2014-6603?
To fix CVE-2014-6603, update Suricata to version 2.0.4 or later.
What are the risks associated with CVE-2014-6603?
CVE-2014-6603 can lead to bypass of SSH rules, denial of service, and potential crashes.
Which versions of Suricata are affected by CVE-2014-6603?
Suricata versions prior to 2.0.4, including 2.0.1-2, 2.0.2-2, and 2.0.3-2, are affected by CVE-2014-6603.
What components are involved in CVE-2014-6603?
CVE-2014-6603 specifically involves the SSHParseBanner function within the SSH parser of Suricata.