CVE-2018-18956: Buffer Overflow
Published Nov 5, 2018
·Updated
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.
Affected Software
1 affected component
Suricata-ids Suricata>=4.0.0<4.0.6
Event History
Nov 5, 2018
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-18956?
CVE-2018-18956 is a vulnerability in Suricata 4.x before 4.0.6 that allows remote attackers to cause a denial of service.
2
How does CVE-2018-18956 impact Suricata?
CVE-2018-18956 can result in a segfault and daemon crash in Suricata due to crafted input to the SMTP parser.
3
What is the severity of CVE-2018-18956?
CVE-2018-18956 has a severity keyword of 'high' and a severity value of 7.5.
4
How can I fix CVE-2018-18956?
To fix CVE-2018-18956, upgrade Suricata to version 4.0.6 or newer.
5
Where can I find more information about CVE-2018-18956?
You can find more information about CVE-2018-18956 at the following references: [1] [2] [3].