Suricata before 8.0.8 fixes multiple high-severity denial-of-service flaws
Listed issues cover CPU and memory exhaustion and a crash in TFTP, SIP, HTTP/2 and DoH2.
Stories per day · 30 days
2 RSS
Relatedbackdoor1cisco1command-execution1data-sanitization1denial-of-service1http21intrusion-detection1local-privilege1machine-learning1poisoning1snort1suricata1tftp1
9 stories, newest first · one card per story
Stories tagged #ids
Snort 3 control socket lets low-privilege local users run commands
Missing socket authentication also allows reading and writing Snort 3 process memory; Cisco has updates and no workaround.
Analyzing and Mitigating Poisoning Attacks on Flow-Based Intrusion Detection
Researchers backdoor flow-based IDS models with 0.001% poisoned data and propose mitigations.
From Network Intrusion Detection to Blockchain-Backed Endpoint Detection and Response: Mapping the Landscape of Decentralized Detection-and-Response Architectures
A systematization maps blockchain roles in detection-and-response and finds per-endpoint on-chain loops remain rare.
How It's Made: Uncovering Detection Engineering Processes for Network Intrusion Detection Rules
SuriCap study of 60 engineers writing 3,146 Suricata rules finds prior experience barely affects rule quality and identifies three rule-engineering phases.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 patches 67 vulnerabilities in the open-source network IDS/IPS engine, with follow-up discussion on oss-security.
Re: Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7 was released fixing 67 vulnerabilities; project lead Victor Julien confirmed the announcement and offered future posts.
Suricata 8.0.7 released with 67 vulnerabilities fixed
Suricata 8.0.7, the open-source network IDS/IPS engine, ships a patch release fixing 67 vulnerabilities with no known exploitation reported.
USN-8766-1: Suricata-Update vulnerability
Ubuntu patches Suricata-Update path validation flaw allowing arbitrary file writes outside the rules directory from malicious rule archives.