Debian/suricata: critical 9.8
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the sec
Action: Upgrade suricata to 1:6.0.13-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:6.0.13-1 | - |
Fixed versions
| 1:6.0.13-1 |
Sources
- osv: DEBIAN-CVE-2023-35853#Debian:14/suricata
- https://security-tracker.debian.org/tracker/CVE-2023-35853
published · modified · JSON