CVE-2017-7177 Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
HighCVSS 7.5
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/suricata(Debian:13) | < 3.2.1-1 | 3.2.1-1 |
| debian/suricata(Debian:14) | < 3.2.1-1 | 3.2.1-1 |
| openinfosecfoundation suricata | <= 3.2 | No fix listed |
References
- Debian Security Tracker CVE-2017-7177 vendor-advisory
- 97047 vdb-entry
- github.com issue-tracking patch third-party-advisory
- [debian-lts-announce] 20181204 [SECURITY] [DLA 1603-1] suricata security update mailing-list
- redmine.openinfosecfoundation.org issue-tracking patch third-party-advisory
- bugs.debian.org issue-tracking