CVE-2019-10053

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-13 · updated 2026-06-17
Weakness: CWE-125

Description

An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, then the program runs into a heap-based buffer over-read. This occurs because the erroneous search for \r results in an integer underflow.

Affected products

Suricata-Ids Suricata: from 4.1.0 before 4.1.4 — fixed in 4.1.4

How to fix

Upgrade to a fixed version: Suricata-Ids Suricata 4.1.4. Check the vendor advisory for mitigations.

References

https://lists.openinfosecfoundation.org/pipermail/oisf-announce/
https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
https://lists.openinfosecfoundation.org/pipermail/oisf-announce/
https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/

Get alerted when CVE-2019-10053 or the next vulnerability affects your stack