CVE-2018-10242

Name of the Vulnerable Software and Affected Versions Suricata version 4.0.4

Description The issue arises from incorrect handling of the SSH banner parsing in Suricata. A malformed SSH banner can cause the parsing code to read beyond the allocated data due to the lack of a length check in the SSHParseBanner function in app-layer-ssh.c.

Recommendations For Suricata version 4.0.4, consider disabling the SSH parsing functionality until a patch is available to prevent potential exploitation. Restrict access to the SSHParseBanner function in app-layer-ssh.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.