CVE-2021-35063

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990835Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1980453Issue Tracking, Third Party Advisory
https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489Release Notes, Vendor Advisory
https://github.com/OISF/suricata/releasesThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JU27J2ZYG6FBDL5CERE6FBB4ZFGHOROE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEP7PWY4LRT2R4MFLV7JIJRYZEZ7RQFL/
https://security-tracker.debian.org/tracker/CVE-2021-35063Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990835Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1980453Issue Tracking, Third Party Advisory
https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489Release Notes, Vendor Advisory
https://github.com/OISF/suricata/releasesThird Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JU27J2ZYG6FBDL5CERE6FBB4ZFGHOROE/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XEP7PWY4LRT2R4MFLV7JIJRYZEZ7RQFL/
https://security-tracker.debian.org/tracker/CVE-2021-35063Third Party Advisory

Timeline

Published: Jul 22, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-350649.8KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. Sudoers permits running of multiple dang CVE-2021-350657.5The glob-parent package before 6.0.1 for Node.js allows ReDoS (regular expression denial of service) attacks against the enclosure regular e CVE-2021-350669.8An XXE vulnerability exists in ConnectWise Automate before 2021.0.6.132.CVE-2021-350678.1Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message c CVE-2021-350689.8Lack of null check while freeing the device information buffer in the Bluetooth HFP protocol can lead to a NULL pointer dereference in Snapd CVE-2021-350697.8Improper validation of data length received from DMA buffer can lead to memory corruption. in Snapdragon Auto, Snapdragon Compute, Snapdrago CVE-2021-35076.1A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in CVE-2021-350705.5RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosure in Snapdragon Ind CVE-2021-350715.5Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to Denial of Service i CVE-2021-350727.8Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Con CVE-2021-350737.5Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Sna CVE-2021-350747.8Possible integer overflow due to improper fragment datatype while calculating number of fragments in a request message in Snapdragon Auto, S