Vulnerabilities in OISF

55 results
Vexday analysis

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2024-23837HIGHLibHTP unbounded folded header handling leads to denial serviceEPSS 1.2%CVE-2024-38535HIGHSuricata http2: oom from duplicate headersEPSS 1.2%CVE-2024-23836HIGHcrafted traffic can cause denial of serviceEPSS 1.2%CVE-2024-55627MEDIUMSuricata segfault on StreamingBufferSlideToOffsetWithRegionsEPSS 1.0%CVE-2024-32663HIGHSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvationEPSS 1.0%CVE-2024-23835HIGHSuricata's pgsql: memory exhaustion use on record parsingEPSS 0.9%CVE-2024-38536HIGHSuricata http/range: NULL-ptr deref when http.memcap is reachedEPSS 0.9%CVE-2024-38534HIGHSuricata modbus: txs without responses are never freedEPSS 0.9%CVE-2024-32664MEDIUMSuricata's base64 contains an out of bounds writeEPSS 0.9%CVE-2024-28871HIGHExcessive CPU used on malformed trafficEPSS 0.8%CVE-2024-23839HIGHSuricata http: heap use after free with http.request_header and http.response_header keywordsEPSS 0.8%CVE-2024-45797HIGHLibHTP's unbounded header handling leads to denial serviceEPSS 0.7%CVE-2024-32867MEDIUMSuricata's defrag contains various issues leading to policy bypassEPSS 0.7%CVE-2024-55628HIGHSuricata oversized resource names utilizing DNS name compression can lead to resource starvationEPSS 0.7%CVE-2024-55605HIGHSuricata allows stack overflow in transformsEPSS 0.7%CVE-2024-24568MEDIUMSuricata http2: header handling evasionEPSS 0.6%CVE-2024-37151MEDIUMSuricata defrag: IP ID reuse can lead to policy bypassEPSS 0.6%CVE-2024-47522HIGHSuricata ja4: invalid alpn leads to panicEPSS 0.6%CVE-2024-28870HIGHSuricata uses excessive resource use in malformed ssh traffic parsingEPSS 0.6%CVE-2024-55629HIGHSuricata generic detection bypass using TCP urgent supportEPSS 0.5%