DEBIAN-CVE-2018-6794
- Source
- https://security-tracker.debian.org/tracker/CVE-2018-6794
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2018-6794.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2018-6794
- Upstream
- Published
- 2018-02-07T05:29:00Z
- Modified
- 2025-09-25T22:40:41Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI utilities, but ignored by Suricata IDS signatures. This mostly affects IDS signatures for the HTTP protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual.
- References
Affected packages
Debian:11 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source
Debian:12 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source
Debian:13 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source
Debian:14 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source