PT-2019-11405
CVE-2019-10054
·
Published
2019-08-28
·
Updated
2021-07-21
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Suricata version 4.1.3
Description:
An issue was discovered in the function
process reply record v3 where it lacks a check for the length of reply.data, causing an invalid memory access and resulting in the program crashing within the nfs/nfs3.rs file.Recommendations:
For Suricata version 4.1.3, consider applying a patch or fix that adds a length check for
reply.data in the process reply record v3 function to prevent invalid memory access and program crashes. Found an issue in the description? Have something to add? Feel free to write us 👾