CVE-2019-10052: High severity suricata vulnerability
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parseclientidoption in the dhcp/parser.rs file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-10052?
CVE-2019-10052 is a vulnerability discovered in Suricata 4.1.3 that allows an attacker to cause a panic in the Rust environment by sending a network packet with an incorrect length, leading to a denial of service.
How severe is CVE-2019-10052?
CVE-2019-10052 has a severity level of high with a CVSS score of 7.5.
What software versions are affected by CVE-2019-10052?
Suricata 4.1.3 is affected by CVE-2019-10052.
How can I fix the CVE-2019-10052 vulnerability?
To fix the CVE-2019-10052 vulnerability, users should update Suricata to version 4.1.4 or later.
Where can I find more information about CVE-2019-10052?
You can find more information about CVE-2019-10052 on the following references: - [Redmine Issue 2902](https://redmine.openinfosecfoundation.org/issues/2902) - [Redmine Issue 2947](https://redmine.openinfosecfoundation.org/issues/2947) - [Suricata Blog Post](https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/)