Vulnerabilidades en OISF

90 resultados
Análisis Vexday

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2026-45759HIGHSuricata http1: quadratic Content-Disposition processing can lead to denial of serviceEPSS 0.6%CVE-2026-57228HIGHSuricata smtp/mime: heap out-of-bounds read quoted-printable decoderEPSS 0.6%CVE-2026-57226LOWSuricata swf: heap buffer overflow in SWF decompression depth handlingEPSS 0.6%CVE-2024-55629HIGHSuricata generic detection bypass using TCP urgent supportEPSS 0.5%CVE-2024-45795HIGHSuricata detect/datasets: reachable assertion with unimplemented rule optionEPSS 0.5%CVE-2026-22259HIGHSuricata dnp3: unbounded transaction growthEPSS 0.5%CVE-2025-59150HIGHSuricata: Keyword tls.subjectaltname can lead to NULL-ptr derefEPSS 0.5%CVE-2026-22260HIGHSuricata http1: infinite recursion in decompressionEPSS 0.5%CVE-2026-46387HIGHSuricata http2: decompression bomb can cause denial of service in SuricataEPSS 0.5%CVE-2026-45752MEDIUMSuricata detect/transform: use-after-free in decompress transformsEPSS 0.5%CVE-2026-45751MEDIUMSuricata detect/transform: use-after-free in dotprefix transformEPSS 0.5%CVE-2026-22258HIGHSuricata DCERPC: unbounded fragment buffering leads to memory exhaustionEPSS 0.5%CVE-2026-22262MEDIUMSuricata datasets: stack overflow when saving a setEPSS 0.5%CVE-2026-45768HIGHSuricata ldap: unbounded responses per transaction can lead to resource exhaustionEPSS 0.5%CVE-2026-45763MEDIUMSuricata lua: sandbox allocation limit not enforced for new allocationsEPSS 0.5%CVE-2025-53538HIGHSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvationEPSS 0.5%CVE-2024-45796MEDIUMSuricata defrag: off by one can lead to policy bypassEPSS 0.5%CVE-2026-46352HIGHSuricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockEPSS 0.5%CVE-2026-57222MEDIUMSuricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6EPSS 0.4%CVE-2026-45762HIGHSuricata defrag: missing address-family check can lead to remote crashEPSS 0.4%