openinfosecfoundation 関連製品全体の CVE とセキュリティ脆弱性情報を集約し、CVSS、EPSS、公開日、脆弱性情報データを掲載しています。
公開された問題は vendor risk input validation、vendor risk memory corruption, and vendor risk denial of service に関連することが多く、vendor surface production workloads and vendor surface software deployment の文脈で vendor impact unexpected behavior などの暴露リスクを伴う場合があります。
掲載データは公開脆弱性情報とセキュリティ公告に基づき、過去の暴露面と修補優先度の評価に利用できます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2017-15377 | In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default). | [email protected] | 7.5 | 0.53% | 2017-10-23 | 2026-05-13 |
| CVE-2015-8954 | The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request. | [email protected] | 9.8 | 1.86% | 2017-03-20 | 2026-05-13 |
| CVE-2017-7177 | Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching. | [email protected] | 7.5 | 0.24% | 2017-03-18 | 2026-05-13 |
| CVE-2015-0971 | The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates. | [email protected] | 5.0 | 0.39% | 2015-05-14 | 2026-05-06 |
| CVE-2014-6603 | The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write. | [email protected] | 5.0 | 0.53% | 2014-10-07 | 2026-05-06 |
| CVE-2013-5919 | Suricata before 1.4.6 allows remote attackers to cause a denial of service (crash) via a malformed SSL record. | [email protected] | 5.0 | 0.94% | 2014-05-30 | 2026-05-06 |