CVE-2018-10243

EUVD-2018-2317
htp_parse_authorization_digest in htp_parsers.c in LibHTP 0.5.26 allows remote attackers to cause a heap-based buffer over-read via an authorization digest header.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
Affected Products (NVD)
VendorProductVersion
oisflibhtp
0.5.26
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libhtp
bookworm
1:0.5.42-1
fixed
bullseye
1:0.5.36-1
fixed
sid
1:0.5.49-1
fixed
stretch
no-dsa
trixie
1:0.5.49-1
fixed
suricata
bookworm
1:6.0.10-1
fixed
bullseye
1:6.0.1-3
fixed
sid
1:7.0.7-1
fixed
stretch
no-dsa
trixie
1:7.0.7-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
htp
bionic
needs-triage
cosmic
ignored
disco
ignored
eoan
ignored
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage
libhtp
bionic
needs-triage
cosmic
ignored
disco
ignored
eoan
ignored
focal
needs-triage
groovy
ignored
hirsute
ignored
impish
ignored
jammy
needs-triage
kinetic
ignored
lunar
ignored
mantic
ignored
noble
needs-triage
trusty
dne
xenial
needs-triage
suricata
bionic
needed
cosmic
ignored
disco
ignored
eoan
ignored
focal
dne
groovy
dne
hirsute
dne
impish
dne
jammy
not-affected
kinetic
not-affected
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
dne
xenial
needed
Common Weakness Enumeration
References
https://lists.debian.org/debian-lts-announce/2019/04/msg00010.html
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/
https://lists.debian.org/debian-lts-announce/2019/04/msg00010.html
https://suricata-ids.org/2018/07/18/suricata-4-0-5-available/