Vulnerability CVE-2021-35063: Information

Description

Suricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

Severity: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-35063

Published: July 22, 2021

Modified: Nov. 7, 2023

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
suricata	sisyphus	6.0.4-alt1	6.0.19-alt1	ALT-PU-2022-1180-1	294444	Fixed
suricata	c10f1	6.0.10-alt1	6.0.10-alt1	ALT-PU-2024-3982-2	342715	Fixed
suricata	c9f2	6.0.10-alt0.c9f2.1	6.0.19-alt0.c9f2.1	ALT-PU-2024-8133-3	348670	Fixed
suricata	p11	6.0.4-alt1	6.0.10-alt1	ALT-PU-2022-1180-1	294444	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
https://github.com/OISF/suricata/releases	Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=990835	Mailing List Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2021-35063	Third Party Advisory
https://forum.suricata.io/t/suricata-6-0-3-and-5-0-7-released/1489	Release Notes Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1980453	Issue Tracking Third Party Advisory
FEDORA-2021-ad5883c848
FEDORA-2021-c7fd9e9126

Affected configurations:
1. Configuration 1
  cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
  Start including
  6.0.0
  End excliding
  6.0.3
  cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
  End excliding
  5.0.7
  
  Configuration 2
  cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  
  Configuration 3
  cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
  cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla

Version: v24.5.3