CVE-2019-1010279

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass. The impact is: An attacker can evade a signature detection with a specialy formed sequence of network packets. The component is: detect.c (https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186b). The attack vector is: An attacker can trigger the vulnerability by a specifically crafted network TCP session. The fixed version is: 4.1.3.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-347

Affected software

Vendor	Product	Versions
Open Information Security Foundation	Suricata	prior to version 4.1.3 [fixed: 4.1.3]

References

https://github.com/OISF/suricata/pull/3625Third Party Advisory
https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186bPatch, Third Party Advisory
https://redmine.openinfosecfoundation.org/issues/2770Exploit, Vendor Advisory
https://github.com/OISF/suricata/pull/3625Third Party Advisory
https://github.com/OISF/suricata/pull/3625/commits/d8634daf74c882356659addb65fb142b738a186bPatch, Third Party Advisory
https://redmine.openinfosecfoundation.org/issues/2770Exploit, Vendor Advisory

Timeline

Published: Jul 18, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-10102837.5Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. Th CVE-2019-10102876.1Timesheet Next Gen 1.5.3 and earlier is affected by: Cross Site Scripting (XSS). The impact is: Allows an attacker to execute arbitrary HTML CVE-2019-10102906.1Babel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection to any URL, which is supplied to redirect.ph CVE-2019-10102929.8Linaro/OP-TEE OP-TEE Prior to version v3.4.0 is affected by: Boundary checks. The impact is: This could lead to corruption of any memory whi CVE-2019-10102939.8Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Boundary crossing. The impact is: Memory corruption of the TEE itself. The component CVE-2019-10102947.5Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Rounding error. The impact is: Potentially leaking code and/or data from previous Tru CVE-2019-10102959.8Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Memory corruption and disclosure of memory content. T CVE-2019-10102969.8Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in context of TEE core (kernel). The c CVE-2019-10102979.8Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Execution of code in TEE core (kernel) context. The c CVE-2019-10102989.8Linaro/OP-TEE OP-TEE 3.3.0 and earlier is affected by: Buffer Overflow. The impact is: Code execution in the context of TEE core (kernel). T CVE-2019-10102995.3The Rust Programming Language Standard Library 1.18.0 and later is affected by: CWE-200: Information Exposure. The impact is: Contents of un CVE-2019-101038.1JetBrains IntelliJ IDEA projects created using the Kotlin (JS Client/JVM Server) IDE Template were resolving Gradle artifacts using an http