CVE-2018-10242 — HIGH (7.5)

Vulnerability Description

Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c lacks a length check.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Oisf	Suricata	4.0.4
Debian	Debian Linux	8.0

Related Weaknesses (CWE)

CWE-125

References

https://lists.debian.org/debian-lts-announce/2019/04/msg00010.htmlThird Party Advisory
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/Release NotesVendor Advisory
https://lists.debian.org/debian-lts-announce/2019/04/msg00010.htmlThird Party Advisory
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/Release NotesVendor Advisory

FAQ

What is CVE-2018-10242?

CVE-2018-10242 is a vulnerability with a CVSS score of 7.5 (HIGH). Suricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner can cause the parsing code to read beyond the allocated data because SSHParseBanner in app-layer-ssh.c ...

How severe is CVE-2018-10242?

CVE-2018-10242 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-10242?

Check the references section above for vendor advisories and patch information. Affected products include: Oisf Suricata, Debian Debian Linux.