Advisory ROSA-SA-2023-2305

software: suricata 6.0.13
WASP: ROSA-CHROME

package_evr_string: suricata-6.0.13-1.src.rpm

CVE-ID: CVE-2023-35852
BDU-ID: 2023-06800
CVE-Crit: HIGH
CVE-DESC.: A vulnerability in the Suricata Intrusion Detection and Prevention System is related to an incorrect restriction of the path name of a restricted directory. Exploitation of the vulnerability could allow an intruder acting remotely to write arbitrary files to the file system
CVE-STATUS: Fixed
CVE-REV: To close, run the command: sudo dnf update suricata

CVE-ID: CVE-2023-35853
BDU-ID: 2023-06802
CVE-Crit: CRITICAL.
CVE-DESC.: A vulnerability in Suricata’s intrusion detection and prevention system is related to insufficient input validation. Exploitation of the vulnerability could allow an intruder acting remotely to execute arbitrary code
CVE-STATUS: Resolved
CVE-REV: To close, run the command: sudo dnf update suricata