CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.
Configurations

Configuration 1 (hide)

cpe:2.3:a:suricata-ids:suricata:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-11-05 21:29

Updated : 2024-02-04 20:03


NVD link : CVE-2018-18956

Mitre link : CVE-2018-18956

CVE.ORG link : CVE-2018-18956


JSON object : View

Products Affected

suricata-ids

  • suricata
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer