CVE catalog

CVE-2016-10728

UBUNTU-CVE-2016-10728

Severity: Medium · CVSS 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Published: Jul 23, 2018, 8:29:00 PM UTC
Updated: Sep 22, 2026, 7:00:38 AM UTC
Source: [NVD] · [CVE record]
EPSS: 2.09% · Oct 25, 2026

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	suricata	13	`3.1.2-1`	fixed
Debian	suricata	14	`3.1.2-1`	fixed
Opensuse	suricata	tumbleweed	`8.0.0-1.1`	fixed
Debian	suricata	8	`2.0.7-2`	vulnerable
Debian	suricata	8	`2.0.7-2+deb8u1`	vulnerable
Debian	suricata	8	`2.0.7-2+deb8u2`	fixed
Ubuntu	suricata	16.04	`2.0.8-1build1`	vulnerable
Ubuntu	suricata	16.04	`2.0.9-1`	vulnerable
Ubuntu	suricata	16.04	`2.0.10-1`	vulnerable
Ubuntu	suricata	16.04	`2.0.10-2`	vulnerable
Ubuntu	suricata	16.04	`2.0.11-1`	vulnerable
Ubuntu	suricata	16.04	`3.0-1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	suricata	deb	13	`3.1.2-1`	Not reported	DEBIAN-CVE-2016-10728	Not reported
Debian	suricata	deb	14	`3.1.2-1`	Not reported	DEBIAN-CVE-2016-10728	Not reported
Opensuse	suricata	rpm	tumbleweed	`8.0.0-1.1`	Not reported	OPENSUSE-SU-2025:15394-1	Not reported
Debian	suricata	deb	8	`2.0.7-2+deb8u2`	Not reported	DLA-1508-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libsuricata8_0_6]Unknown
Source package: [suricata]
Details (1)
- 8.0.6-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.0.0-1.1
  Version impact unknown
  pypi · suricata · opensuse · tumbleweed
[suricata-devel]Unknown
Source package: [suricata]
Details (1)
- 8.0.6-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 8.0.0-1.1
  Version impact unknown
  pypi · suricata · opensuse · tumbleweed
[suricata]Fixed
Source package: [suricata]
Details (1)
- 8.0.6-1.2 · x86_64 · tumbleweed
  Fixed · Fixed: 8.0.0-1.1
  pypi · suricata · opensuse · tumbleweed

[Debian 13 (Trixie)]

[suricata]Fixed
Details (4)
- 1:7.0.10-1+deb13u4 · amd64 · trixie
  Fixed · Fixed: 3.1.2-1
  pypi · suricata · debian · 13
- 1:7.0.10-1+deb13u4 · arm64 · trixie
  Fixed · Fixed: 3.1.2-1
  pypi · suricata · debian · 13
- 1:8.0.6-1~bpo13+1 · amd64 · trixie-backports
  Fixed · Fixed: 3.1.2-1
  pypi · suricata · debian · 13
- 1:8.0.6-1~bpo13+1 · arm64 · trixie-backports
  Fixed · Fixed: 3.1.2-1
  pypi · suricata · debian · 13

Observed: Oct 23, 2026, 5:19:03 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]