Suricata Update
Approved changes feed: RSS · Atom
cpe:2.3:a:oisf:suricata-update:1.0.0a1:*:*:*:*:*:*:*
part: a version: 1.0.0a1 update: *
| Vendor | Oisf (cd5e037f-1562-515c-af4f-7fdde1a9512b) |
|---|---|
| Product | Suricata Update (2da189a0-9695-5bd5-9453-e2ce05c01aaf) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/suricata-update |
purl2cpe | 2026-06-01 10:17:52.065086 |
pkg:deb/ubuntu/suricata-update |
purl2cpe | 2026-06-01 10:17:52.065088 |
pkg:github/oisf/suricata-update |
purl2cpe | 2026-06-01 10:17:52.065090 |
pkg:rpm/opensuse/suricata-update |
purl2cpe | 2026-06-01 10:17:52.065091 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1000167 |
vulnerable | 2026-06-08 05:10:25.572038 |
Details available
OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can result in Remote Code Execution(even as root if suricata-update is called by root). This attack appears to be exploitable via a specially crafted yaml-file at https://www.openinfosecfoundation.org/rules/index.yaml. This vulnerability appears to have been fixed in 1.0.0b1.
Published: 2018-04-18T19:00:00.000Z
Updated: 2024-08-05T12:33:49.402Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.