critical9.8
CVE-2015-8954
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusi…
Impact
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openinfosecfoundation | Suricata | through 2.0.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777523
- https://redmine.openinfosecfoundation.org/issues/1364
- https://suricata-ids.org/2015/01/15/suricata-2-0-6-available/
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=777523
- https://redmine.openinfosecfoundation.org/issues/1364
- https://suricata-ids.org/2015/01/15/suricata-2-0-6-available/