CVE-2015-0971

The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cret@cert.org

Published

2015-05-14

Last modified

2024-08-06

Weaknesses

CWE-399

Affected products

• Debian Linux (Debian)
• Suricata (Openinfosecfoundation)

References

• http://suricata-ids.org/2015/05/06/suricata-2-0-8-available/
• http://www.debian.org/security/2015/dsa-3254