CVE-2018-14568

Published: Jul 23, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).

Affected (1)

Products: Suricata Ids: Suricata

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Suricata Ids Suricata	Before 4.0.5

References (8)

https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/kirillwow/ids_bypass

Source: cve@mitre.org

ExploitThird Party Advisory

https://redmine.openinfosecfoundation.org/issues/2501

Source: cve@mitre.org

ExploitThird Party Advisory

https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/

Source: cve@mitre.org

Vendor Advisory

https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/kirillwow/ids_bypass

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://redmine.openinfosecfoundation.org/issues/2501

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.