https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:18:49 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-34754 cnvd-2019-34754 https://cve.radiocsirt.org/vuln/cnvd-2019-34754 https://cve.radiocsirt.org/vuln/euvd-2026-53305 EUVD-2026-53305 https://cve.radiocsirt.org/vuln/euvd-2026-53305 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10056 <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10056 https://cve.radiocsirt.org/vuln/ghsa-fh58-6cxc-xhx5 <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> https://cve.radiocsirt.org/vuln/ghsa-fh58-6cxc-xhx5 https://cve.radiocsirt.org/vuln/gsd-2019-10056 gsd-2019-10056 https://cve.radiocsirt.org/vuln/gsd-2019-10056 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10056 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata</p> <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata</p> <p>An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn&#39;t determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-10056