tocsin

Debian/suricata: critical 9.1

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is

Action: Upgrade suricata to 1:4.1.5-1 or later.

Affected

introducedfixedlast affected
01:4.1.5-1-

Fixed versions

1:4.1.5-1

Sources

published · modified · JSON