CVE-2018-14568
High
Description
Suricata before 4.0.5 stops TCP stream inspection upon a TCP RST from a server. This allows detection bypass because Windows TCP clients proceed with normal processing of TCP data that arrives shortly after an RST (i.e., they act as if the RST had not yet been received).
SeverityHigh
CVSS7.5
Exploit probability—
ProductSuricata
PublishedJul 23, 2018
First seenJul 23, 2018
How to fix
Update
- suricata-ids suricata4.0.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| suricata-ids suricata | v < 4.0.5 | 4.0.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.