Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Debian 8: DLA-1508-1 Critical Suricata TCP/UDP Detection Issue

debian lts
Calendar Grey September 19, 2018
Dist Debian Esm H88
Debian LTS has issued a security patch for Suricata addressing a TCP/UDP detection flaw triggered by ICMPv4 error messages. It is advised to perform an upgrade.
CVE-2016-10728 If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it can lead to missed TCP/UDP detection

Summary


For Debian 8 "Jessie", this problem has been fixed in version
2.0.7-2+deb8u1.

We recommend that you upgrade your suricata packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: suricata
Version: 2.0.7-2+deb8u1
CVE ID: CVE-2016-10728

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.