Approved changes feed: RSS · Atom
cpe:2.3:a:openinfosecfoundation:suricata:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Openinfosecfoundation (bdf5c2e8-0750-51e3-8461-142cd84df240) |
|---|---|
| Product | Suricata (db7c4332-4d8e-56b1-be7a-be5cf7dfaaff) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/suricata |
purl2cpe | 2026-06-01 10:15:02.427847 |
pkg:deb/ubuntu/suricata |
purl2cpe | 2026-06-01 10:15:02.427851 |
pkg:github/oisf/suricata |
purl2cpe | 2026-06-01 10:15:02.427853 |
pkg:rpm/fedora/suricata |
purl2cpe | 2026-06-01 10:15:02.427856 |
pkg:rpm/opensuse/suricata |
purl2cpe | 2026-06-01 10:15:02.427859 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7177 |
vulnerable | 2026-06-08 05:09:55.429238 |
Details available
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
Published: 2017-03-18T20:10:00.000Z
Updated: 2024-08-05T15:56:36.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15377 |
vulnerable | 2026-06-08 05:08:58.816178 |
Details available
In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default).
Published: 2017-10-23T08:00:00.000Z
Updated: 2024-08-05T19:57:25.695Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8954 |
vulnerable | 2026-06-08 05:07:05.778279 |
Details available
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.
Published: 2017-03-20T16:00:00.000Z
Updated: 2024-08-06T08:36:31.124Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-0971 |
vulnerable | 2026-06-08 05:06:24.406438 |
Details available
The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.
Published: 2015-05-14T14:00:00.000Z
Updated: 2024-08-06T04:26:11.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-6603 |
vulnerable | 2026-06-08 05:05:58.011240 |
Details available
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.
Published: 2014-10-07T14:00:00.000Z
Updated: 2024-08-06T12:24:34.355Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5919 |
vulnerable | 2026-06-08 05:04:54.730288 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.