CVE-2021-35063: High severity OISF Suricata vulnerability
Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."
Other sources
Various security, performance, accuracy and stability issues have been fixed, including a critical evasion assigned CVE-2021-35063.
Reference: https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/suricatato a version that resolves this vulnerability.Fixed in 6.0.3-r0 - Upgrade
Upgrade
debian/suricatato a version that resolves this vulnerability.Fixed in 1:7.0.10-1+deb13u4Fixed in 1:8.0.8-1 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 5.0.7 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 6.0.3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-35063.
What is the severity of CVE-2021-35063?
The severity of CVE-2021-35063 is high with a severity value of 7.5.
What is the affected software?
Suricata versions before 5.0.7 and 6.x before 6.0.3 are affected.
How do I fix CVE-2021-35063?
Upgrade to Suricata version 5.0.7 or 6.0.3 or higher to fix CVE-2021-35063.
Where can I find more information about CVE-2021-35063?
You can find more information about CVE-2021-35063 at the following references: [link1], [link2], [link3].