CVE-2019-10055

An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file.
References
Link Resource
https://redmine.openinfosecfoundation.org/issues/2949 Exploit Issue Tracking Third Party Advisory
https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/ Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:suricata-ids:suricata:4.1.4:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-08-28 21:15

Updated : 2023-12-10 12:59


NVD link : CVE-2019-10055

Mitre link : CVE-2019-10055

CVE.ORG link : CVE-2019-10055


JSON object : View

Products Affected

suricata-ids

  • suricata
CWE
CWE-190

Integer Overflow or Wraparound

CWE-617

Reachable Assertion