V
Scaner-VS
HomeCatalogSourcesCWECAPECATT&CKMitigationsProductsVendorsDocs
BDU:2024-01182
BDU
High

Уязвимость системы обнаружения и предотвращения вторжений Suricata связана с неограниченным распределением ресурсов. Эксплуатация уязвимост…

CVSS
7.5
High
EPSS
0.00
p0
Published
2024-01-01
Updated
2024-01-01
Description

Уязвимость системы обнаружения и предотвращения вторжений Suricata связана с неограниченным распределением ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Tags · CWE
Pre-auth
Affected products
Open information security foundation SuricataOpen information security foundation SuricataOpen information security foundation SuricataOpen information security foundation SuricataАо «лаборатория касперского» Kaspersky anti targeted attack platformАо «лаборатория касперского» Kaspersky anti targeted attack platformАо «лаборатория касперского» Kaspersky endpoint detection and responseАо «лаборатория касперского» Kaspersky endpoint detection and response
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Timeline
2024-01-01
Published
2024-01-01
Updated
CVSS 3.1 breakdown
Attack Vector
AV: N
Network (N)
Attack Complexity
AC: L
Low (L)
Privileges Required
PR: N
None (N)
User Interaction
UI: N
None (N)
Scope
S: U
Unchanged (U)
Confidentiality Impact
C: N
None (N)
Integrity Impact
I: N
None (N)
Availability Impact
A: H
High (H)
Exploit indicators
EPSS
0.000 · p0
Known exploited (KEV)
No
Known exploits — Сканер-ВС
No Сканер-ВС checks registered for this vulnerability yet.
Affected products
ProductVendorStatus
suricataopen information security foundationTracked
suricataopen information security foundationTracked
suricataopen information security foundationTracked
suricataopen information security foundationTracked
kaspersky anti targeted attack platformао «лаборатория касперского»Tracked
kaspersky anti targeted attack platformао «лаборатория касперского»Tracked
kaspersky endpoint detection and responseао «лаборатория касперского»Tracked
kaspersky endpoint detection and responseао «лаборатория касперского»Tracked
Source databases
BDU
Related vulnerabilities
External references
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23836@https://suricata.io/2024/02/08/suricata-7-0-3-and-6-0-16-released/@https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7@https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747@https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7@https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc@https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97@https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8@https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786@https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5@https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01@https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af@https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc@https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/@https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/@https://redmine.openinfosecfoundation.org/issues/6531@https://redmine.openinfosecfoundation.org/issues/6532@https://redmine.openinfosecfoundation.org/issues/6540@https://redmine.openinfosecfoundation.org/issues/6658@https://redmine.openinfosecfoundation.org/issues/6659@https://redmine.openinfosecfoundation.org/issues/6660@https://support.kaspersky.com/vulnerability/list-of-advisories/12430#260324