CVE-2015-0928 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 74%

Affected Products (NVD)

Vendor	Product	Version
oisf	libhtp	0.5.15

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

suricata

bookworm	1:6.0.10-1 fixed
bullseye	1:6.0.1-3 fixed
sid	1:7.0.7-1 fixed
squeeze	no-dsa
trixie	1:7.0.7-1 fixed
wheezy	no-dsa

Ubuntu Releases

Ubuntu Product

Codename

suricata

lucid	dne
precise	ignored
trusty	Fixed 1.4.7-1ubuntu1.1 released
utopic	ignored
vivid	ignored
wily	not-affected
xenial	not-affected
yakkety	not-affected
zesty	not-affected

Common Weakness Enumeration

CWE-476 - NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

http://www.securityfocus.com/bid/73117

https://redmine.openinfosecfoundation.org/issues/1272

http://www.securityfocus.com/bid/73117

https://redmine.openinfosecfoundation.org/issues/1272