SU
Product
suricata
100
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 67Medium 21Low 1
Watch
Add suricata to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-38534 | 7.5 | Jul 11 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.6 |
| CVE-2024-37151 | 7.5 | Jul 11 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 6.0.0 before 6.0.20; 7.0.0 before 7.0.6 |
| CVE-2024-32663 | 7.5 | May 7 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 6.0.0 before 6.0.19; 7.0.0 before 7.0.5 |
| CVE-2024-28870 | 7.5 | Apr 3 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community Affected: before 6.0.17; 7.0.0 before 7.0.4 |
| CVE-2024-23836 | 7.5 | Feb 26 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 6.0.16; 7.0.0 before 7.0.3 |
| CVE-2024-23835 | 7.5 | Feb 26 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 7.0.0 before 7.0.3 |
| CVE-2023-35852 | 7.5 | Jun 19 | In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative… Affected: before 6.0.13 |
| CVE-2020-19678 | 7.5 | Apr 6 | Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote attacker to obtain sensitive information via the file parameter… Affected: 1.4.6 |
| CVE-2021-45098 | 7.5 | Dec 16 | An issue was discovered in Suricata before 6.0.4 Affected: before 6.0.4 |
| CVE-2021-35063 | 7.5 | Jul 22 | Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion." Affected: before 5.0.7; 6.0.0 before 6.0.3 |
| CVE-2019-18625 | 7.5 | Jan 6 | An issue was discovered in Suricata 5.0.0 Affected: 5.0.0 |
| CVE-2019-1010279 | 7.5 | Jul 18 | Open Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of Service - TCP/HTTP detection bypass Affected: before 4.1.3 |
| CVE-2019-1010251 | 7.5 | Jul 18 | Open Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of Service - DNS detection bypass Affected: 4.0.2; 4.0.3; 4.0.5; 4.1.0 |
| CVE-2019-10050 | 7.5 | May 13 | A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4 Affected: 4.0.0 before 4.1.4 |
| CVE-2018-10242 | 7.5 | Apr 4 | Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner Affected: 4.0.4 |
| CVE-2024-32664 | 7.3 | May 7 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 6.0.0 before 6.0.19; 7.0.0 before 7.0.5 |
| CVE-2026-57223 | 7.0 | Sep 18 | Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation Affected: >= 8.0.0, < 8.0.6; < 7.0.17 |