CVE-2023-35853
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by d...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-35853 suricata
- Ubuntu UBUNTU-CVE-2023-35853 suricata
Références
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com
- web stamus-networks.com