CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.
Configurations

Configuration 1

cpe:2.3:a:suricata-ids:suricata:*:*:*:*:*:*:*:*

Information

Published : 2018-11-05 09:29

Updated : 2020-08-24 05:37


NVD link : CVE-2018-18956

Mitre link : CVE-2018-18956

Products Affected
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer