CVE-2017-15377
First published: Mon Oct 23 2017(Updated: )
In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openinfosecfoundation Suricata | <=3.2.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/openinfosecfoundation
- canonical/openinfosecfoundation suricata
- version/openinfosecfoundation suricata/3.2.4