CVE-2023-35853

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 6.0.13

Description The issue is related to insufficient input validation in the Suricata intrusion detection and prevention system. It may allow a remote attacker to execute arbitrary code. An adversary who controls an external source of Lua rules may be able to execute Lua code. This issue is addressed by disabling Lua unless allow-rules is true in the security lua configuration section.

Recommendations For Suricata versions prior to 6.0.13, update to version 6.0.13 or later, which addresses the issue by disabling Lua unless allow-rules is true in the security lua configuration section. As a temporary workaround, consider disabling Lua unless explicitly needed and configured with allow-rules set to true in the security lua configuration section.