7.5

CVE-2019-10051

Exploit

An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes.

Data is provided by the National Vulnerability Database (NVD)
Suricata-ids ≫ Suricata Version4.1.3
Suricata-ids ≫ Suricata Version4.1.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.6% 0.684
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
Vendor Advisory
Not Applicable
Release Notes
https://github.com/OISF/suricata/pull/3734
Patch
Third Party Advisory
Exploit
https://redmine.openinfosecfoundation.org/issues/2896
Third Party Advisory
Exploit
Issue Tracking