tocsin

Debian/suricata: high 7.5

An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crash within the ftp/mod.rs file.

Action: Upgrade suricata to 1:4.1.4-1 or later.

Affected

introducedfixedlast affected
01:4.1.4-1-

Fixed versions

1:4.1.4-1

Sources

published · modified · JSON