Back to KEVs

CVE-2018-18956

The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault...

Basic Information

CVE State
PUBLISHED
Reserved Date
November 05, 2018
Published Date
November 05, 2018
Last Updated
August 05, 2024
Vendor
Suricata
Product
Suricata
Description
The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfault and daemon crash) via crafted input to the SMTP parser, as exploited in the wild in November 2018.

CVSS Scores

CVSS v3.0

7.5 - HIGH

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploit Status

Exploited in the Wild
Yes (2018-11-05 21:00:00 UTC) Source

References

https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-October/016227.html https://redmine.openinfosecfoundation.org/issues/2658#change-10374 https://lists.openinfosecfoundation.org/pipermail/oisf-users/2018-November/016316.html

Known Exploited Vulnerability Information

Source Added Date
CVE 2018-11-05 21:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel