NVD

Id
34092  
Name
CVE-2014-6603  
Description
The SSHParseBanner function in SSH parser (app-layer-ssh.c) in Suricata before 2.0.4 allows remote attackers to bypass SSH rules, cause a denial of service (crash), or possibly have unspecified other impact via a crafted banner, which triggers a large memory allocation or an out-of-bounds write.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-10-07  
Modified Date
2014-10-08  
Seq
2014-6603  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
177091 34092 CVE-2014-6603 FEDORA-2014-11302  View
177092 34092 CVE-2014-6603 FEDORA-2014-11462  View
177093 34092 CVE-2014-6603 http://packetstormsecurity.com/files/128382/Suricata-2.0.3-Out-Of-Bounds-Access.html  View
177094 34092 CVE-2014-6603 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser  View
177095 34092 CVE-2014-6603 20140923 CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser  View
177096 34092 CVE-2014-6603 70083  View
177097 34092 CVE-2014-6603 suricata-cve20146603-dos(96157)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
15728 JVNDB-2014-004603 Suricata の SSH parser の SSHParseBanner 関数における SSH ルールを回避される脆弱性 Suricata の SSH parser (app-layer-ssh.c) の SSHParseBanner 関数には、SSH ルールを回避され、サービス運用妨害 (クラッシュ) 状態にされるなど、不特定の影響を受ける脆弱性が存在します。 CVE-2014-6603 73895 CVE-2014-6603 34092 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004603.html 2014-09-23 2014-10-09 View