QwikSec

Security Database

CVE

CWE

Training

CVE-2016-10728

Published: Jul 23, 2018

Modified: Aug 6, 2024

PUBLISHED

Description

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://suricata-ids.org/2016/09/07/suricata-3-1-2-released/

x_refsource_MISC

https://redmine.openinfosecfoundation.org/issues/1880

x_refsource_MISC

[debian-lts-announce] 20180919 [SECURITY] [DLA 1508-1] suricata security update

mailing-list

x_refsource_MLIST

https://github.com/kirillwow/ids_bypass

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.