CVE catalog

CVE-2017-7177

UBUNTU-CVE-2017-7177

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.26% · Oct 25, 2026

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fragment matching.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansuricata133.2.1-1fixed
Debiansuricata143.2.1-1fixed
Debiansuricata71.2.1-2vulnerable
Debiansuricata71.2.1-2+deb7u1fixed
Ubuntusuricata16.042.0.8-1build1vulnerable
Ubuntusuricata16.042.0.9-1vulnerable
Ubuntusuricata16.042.0.10-1vulnerable
Ubuntusuricata16.042.0.10-2vulnerable
Ubuntusuricata16.042.0.11-1vulnerable
Ubuntusuricata16.043.0-1vulnerable
Ubuntusuricata18.043.2-2ubuntu3vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansuricatadeb133.2.1-1Not reportedDEBIAN-CVE-2017-7177Not reported
Debiansuricatadeb143.2.1-1Not reportedDEBIAN-CVE-2017-7177Not reported
Debiansuricatadeb71.2.1-2+deb7u1Not reportedDLA-865-1Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

  • [suricata]Fixed
    Details (4)

    • 1:7.0.10-1+deb13u4 · amd64 · trixie

      Fixed · Fixed: 3.2.1-1

      pypi · suricata · debian · 13

    • 1:7.0.10-1+deb13u4 · arm64 · trixie

      Fixed · Fixed: 3.2.1-1

      pypi · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 3.2.1-1

      pypi · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 3.2.1-1

      pypi · suricata · debian · 13

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]