high7.5
CVE-2019-10052
An issue was discovered in Suricata 4.1.3.
Impact
An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCP packet. At this point, the Rust environment runs into a panic in parse_clientid_option in the dhcp/parser.rs file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suricata-Ids | Suricata | Version 4.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://redmine.openinfosecfoundation.org/issues/2902
- https://redmine.openinfosecfoundation.org/issues/2947
- https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
- https://redmine.openinfosecfoundation.org/issues/2902
- https://redmine.openinfosecfoundation.org/issues/2947
- https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/