critical9.8
CVE-2019-10053
An issue was discovered in Suricata 4.1.x before 4.1.4.
Impact
An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the program runs into a heap-based buffer over-read. This occurs because the erroneous search for \r results in an integer underflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suricata-Ids | Suricata | from 4.1.0 before 4.1.4 |