SB2018072323 - Input validation error in Suricata
Published: July 23, 2018 Updated: August 8, 2020
Security Bulletin ID
SB2018072323
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2018-14568)
The vulnerability allows a remote non-authenticated attacker to manipulate data.
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).
Remediation
Install update from vendor's website.