Vulnerabilities > Openinfosecfoundation > Suricata > 3.1.3

DATE CVE VULNERABILITY TITLE RISK
2017-10-23 CVE-2017-15377 Unspecified vulnerability in Openinfosecfoundation Suricata
In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c.
network
low complexity
openinfosecfoundation
5.0
2017-03-18 CVE-2017-7177 Improperly Implemented Security Check for Standard vulnerability in Openinfosecfoundation Suricata
Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.
network
low complexity
openinfosecfoundation CWE-358
5.0