CVE-2016-10728

State: Published
Severity: Not scored
Published: Jul 23, 2018
Updated: Aug 6, 2024
Reserved: Jul 23, 2018

Description

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://suricata-ids.org/2016/09/07/suricata-3-1-2-released/
https://redmine.openinfosecfoundation.org/issues/1880
[debian-lts-announce] 20180919 [SECURITY] [DLA 1508-1] suricata security updatemailing-list
https://github.com/kirillwow/ids_bypass

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.