CVE catalog

CVE-2017-15377

UBUNTU-CVE-2017-15377

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.97% · Oct 25, 2026

In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signature, because of DetectEngineContentInspection in detect-engine-content-inspection.c. The search engine doesn't stop when it should after no match is found; instead, it stops only upon reaching inspection-recursion-limit (3000 by default).

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansuricata131:4.0.0-1fixed
Debiansuricata141:4.0.0-1fixed
Debiansuricata82.0.7-2vulnerable
Debiansuricata82.0.7-2+deb8u1vulnerable
Debiansuricata82.0.7-2+deb8u2vulnerable
Debiansuricata82.0.7-2+deb8u3fixed
Ubuntusuricata16.042.0.8-1build1vulnerable
Ubuntusuricata16.042.0.9-1vulnerable
Ubuntusuricata16.042.0.10-1vulnerable
Ubuntusuricata16.042.0.10-2vulnerable
Ubuntusuricata16.042.0.11-1vulnerable
Ubuntusuricata16.043.0-1vulnerable
Ubuntusuricata18.043.2-2ubuntu3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansuricatadeb131:4.0.0-1Not reportedDEBIAN-CVE-2017-15377Not reported
Debiansuricatadeb141:4.0.0-1Not reportedDEBIAN-CVE-2017-15377Not reported
Debiansuricatadeb82.0.7-2+deb8u3Not reportedDLA-1603-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [suricata]Fixed
    Details (4)

    • 1:7.0.10-1+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:4.0.0-1

      pypi · suricata · debian · 13

    • 1:7.0.10-1+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:4.0.0-1

      pypi · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:4.0.0-1

      pypi · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:4.0.0-1

      pypi · suricata · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]