CVE-2019-10051

HIGH

Suricata 4.1.3 - Denial of Service in SMB File Tracking

Title source: llm

Description

An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, then the program enters an smb/files.rs error condition and crashes.

References (3)

Core 3

Core References

Not Applicable, Release Notes, Vendor Advisory x_refsource_confirm

https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/

Exploit, Issue Tracking, Third Party Advisory x_refsource_misc

https://redmine.openinfosecfoundation.org/issues/2896

Exploit, Patch, Third Party Advisory x_refsource_misc

https://github.com/OISF/suricata/pull/3734

Scores

CVSS v3 7.5

EPSS 0.0213

EPSS Percentile 79.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-754

Status published

Products (2)

suricata-ids/suricata 4.1.3

suricata-ids/suricata 4.1.4

Published Aug 28, 2019

Tracked Since Feb 18, 2026