CVE-2015-0971

2015-05-1414:59:06

CWE-399

certcc

web.nvd.nist.gov

suricata

der parser

remote attackers

denial of service

ssl

tls

certificates

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.003

Percentile

69.8%

JSON

The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.

Affected configurations

Nvd

Node

debiandebian_linuxMatch8.0

Node

openinfosecfoundationsuricataRange≤2.0.7

VendorProductVersionCPE
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
openinfosecfoundationsuricata*cpe:2.3:a:openinfosecfoundation:suricata:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
debian	debian_linux	8.0	cpe:2.3:o:debian:debian_linux:8.0:::::::*
openinfosecfoundation	suricata	*	cpe:2.3:a:openinfosecfoundation:suricata::::::::