Open Information Security Foundation

Today

11:36 AM Suricata Bug #2501 (Closed): Suricata stops inspecting TCP stream if a TCP RST was met

https://github.com/OISF/suricata/pull/3428/commits/843d0b7a10bb45627f94764a6c5d468a24143345

08:23 AM Suricata Bug #2542 (Closed): ssh out of bounds read

https://github.com/OISF/suricata/pull/3428/commits/9ba89a31efc89ec5cb72326dbcb9166b098f3ea0

08:22 AM Suricata Bug #2543 (Closed): enip out of bounds read

https://github.com/OISF/suricata/pull/3428/commits/f68bf3301ad4d25f0a5ecb13405f4e26316cdf8d

07/18/2018

12:51 PM Suricata Bug #2543 (Assigned): enip out of bounds read

12:51 PM Suricata Bug #2542 (Assigned): ssh out of bounds read

12:50 PM Suricata Bug #2545 (Closed): enip out of bounds read (4.0.x)

See #2543

12:50 PM Suricata Bug #2544 (Closed): ssh out of bounds read (4.0.x)

See #2542

12:37 PM Suricata Bug #2543 (Closed): enip out of bounds read

CVE-2018-10244
Out of bound reads in parsing of numeric values in the ENIP parser. This parser is disabled by defa...

12:35 PM Suricata Bug #2542 (Closed): ssh out of bounds read

CVE-2018-10242
Out of bounds read in banner parsing. First introduced in https://github.com/OISF/suricata/commit/3...

11:23 AM Suricata Revision f68bf330: enip: harden byte parsing code

Make sure we never read more than we have.
Reported-by: Henning Perl