Suricata generic detection bypass using TCP urgent support

Suricata oversized resource names utilizing DNS name compression can lead to resource starvation

Suricata segfault on StreamingBufferSlideToOffsetWithRegions

Suricata allows stack overflow in transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative…

Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensitive information via the file parameter…

An issue was discovered in Suricata before 6.0.4

Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

An issue was discovered in Suricata 5.0.0

Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass

Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass

A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation

Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata detect/transform: use-after-free in decompress transforms

Suricata lua: sandbox allocation limit not enforced for new allocations

Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading

Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata oversized bpf file can lead to buffer overflow

Suricata smtp/mime: incomplete state reset allows detection bypass

Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Suricata sip: large SIP message bodies can evade detection with frame keyword

Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6

Suricata http1: quadratic complexity in headers parsing over multiple packets

Suricata eve/alert: http1 xff handling can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata datasets: save to absolute filename can be bypassed when combined with load command

Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load

Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record