CVE-2019-16411 - CVE House
Back to Database
Status published Critical CVE-2019-16411

An issue was discovered in Suricata 4.1.4. By sending multiple...

Vulnerability Description

An issue was discovered in Suricata 4.1.4. By sending multiple IPv4 packets that have invalid IPv4Options, the function IPV4OptValidateTimestamp in decode-ipv4.c tries to access a memory region that is not allocated. There is a check for o->len < 5 (corresponding to 2 bytes of header and 3 bytes of data). Then, "flag = *(o->data + 3)" places one beyond the 3 bytes, because the code should have been "flag = *(o->data + 1)" instead.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16411

Credits & Attribution

No credits recorded in the NVD database.

References

More from suricata-ids

View All →
CVE-2019-16410
An issue was discovered in Suricata 4.1.4. By sending multiple...
Critical 9.1
CVE-2019-15699
An issue was discovered in app-layer-ssl.c in Suricata 4.1.4. Upon...
Critical 9.1
CVE-2019-10056
An issue was discovered in Suricata 4.1.3. The code mishandles...
High 7.5
CVE-2019-10055
An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response...
High 7.5
CVE-2019-10054
An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3...
High 7.5

Affected Vendor

suricata-ids

View all reports →

Affected Software

suricata
Vulnerable Versions:
4.1.4

Timeline

Official Publish: September 24th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.