CVE-2019-18625

Katalog CVE

CVSS 7.5 · High EPSS 1,7%

Kerentanan pada oisf suricata, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After the TCP SYN packet, it is possible to inject a RST ACK and a FIN ACK packet with a bad TCP Timestamp option. The client will ignore the RST ACK and the FIN ACK packets because of the bad TCP Timestamp option. Both linux and windows client are ignoring the injected packets.

Rincian

Terbit di NVD

6 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OISF/suricata/commit/9f0294fadca3dcc18c919424242a41e01f3e8318 patch · advisory pihak ketiga
• https://github.com/OISF/suricata/commit/ea0659de7640cf6a51de5bbd1dbbb0414e4623a0 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2020/01/msg00032.html mailing list · advisory pihak ketiga
• https://redmine.openinfosecfoundation.org/issues/3286 advisory pihak ketiga
• https://redmine.openinfosecfoundation.org/issues/3395 advisory pihak ketiga