CVE-2023-35853
EUVD-2023-3984619.06.2023, 04:15
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| oisf | suricata | 𝑥 < 6.0.13 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References