CVE-2019-15699

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of the HSHelloExtensions part of the packet.

Score

CVSS 3.1 9.1 Critical

Status

Modified - cve@mitre.org

Published

2019-09-24

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Suricata (Suricata-ids)

References

• https://lists.openinfosecfoundation.org/pipermail/oisf-announce/
• https://suricata-ids.org/2019/09/24/suricata-4-1-5-released/