Oisf: >> Suricata Security Vulnerabilities
Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.
CVSS Score
7.5
EPSS Score
0.004
Published
2019-04-04
Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record.
CVSS Score
5.0
EPSS Score
0.009
Published
2014-05-30
Page 6