CVE-2019-15699 - CVE House
Back to Database
Status published Critical CVE-2019-15699

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon...

Vulnerability Description

An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon receiving a corrupted SSLv3 (TLS 1.2) packet, the parser function TLSDecodeHSHelloExtensions tries to access a memory region that is not allocated, because the expected length of HSHelloExtensions does not match the real length of the HSHelloExtensions part of the packet.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15699

Credits & Attribution

No credits recorded in the NVD database.

References

More from suricata-ids

View All →
CVE-2019-16411
An issue was discovered in Suricata 4.1.4. By sending multiple...
Critical 9.8
CVE-2019-16410
An issue was discovered in Suricata 4.1.4. By sending multiple...
Critical 9.1
CVE-2019-10056
An issue was discovered in Suricata 4.1.3. The code mishandles...
High 7.5
CVE-2019-10055
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response...
High 7.5
CVE-2019-10054
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3...
High 7.5

Affected Vendor

suricata-ids

View all reports →

Affected Software

suricata
Vulnerable Versions:
4.1.4

Timeline

Official Publish: September 24th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.