Detections
Analytics

Fedora 21 : suricata-2.0.7-1.fc21 (2015-2828)

high Nessus Plugin ID 81797

Language:

Synopsis

The remote Fedora host is missing a security update.

Description

This release fixes a parsing issue in the DCERPC parser that can happen when Suricata runs out of memory. The exact scope of the problem isn't clear, but it could certainly lead to crashes.
CVE-2015-0928 is assigned for this. The second issue is certain characters in the URI could confuse the parsing of the HTTP request line, leading to possible detection bypass for 'http_uri' and to incomplete logging of the URI. Upgrading is recommended.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected suricata package.

See Also

http://www.nessus.org/u?589aa0bd

Plugin Details

Severity: High

ID: 81797

File Name: fedora_2015-2828.nasl

Version: 1.4

Type: local

Agent: unix

Published: 3/13/2015

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Continuous Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:suricata, cpe:/o:fedoraproject:fedora:21

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2/28/2015

Reference Information

FEDORA: 2015-2828