CVE-2019-10050

Name of the Vulnerable Software and Affected Versions: Suricata versions 4.1.x through 4.1.3

Description: A buffer over-read issue was discovered. The issue arises when the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of source address and destination address plus the correct type field and the right number for shim, allowing an attacker to manipulate the control flow. This manipulation leads to a loop condition being met, resulting in a network packet with a length of 2 bytes. Since there is no validation of this length, the code later attempts to read at an empty position, causing a crash.

Recommendations: For Suricata versions 4.1.x through 4.1.3, update to version 4.1.4 or later to resolve the issue.