CVE-2023-35852

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigg...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2023-35852 suricata Corrigé dans: 1:6.0.1-3+deb11u1
Ubuntu UBUNTU-CVE-2023-35852 suricata

Références

advisory github.com
advisory nvd.nist.gov
patch github.com
patch github.com
web github.com
web lists.debian.org
web stamus-networks.com