Vulnerabilidades em OISF

90 resultados
Análise Vexday

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2024-55605HIGHSuricata allows stack overflow in transformsEPSS 0.7%CVE-2024-24568MEDIUMSuricata http2: header handling evasionEPSS 0.6%CVE-2026-45764CRITICALSuricata http2: protocol-change type confusion can lead to denial of serviceEPSS 0.6%CVE-2026-63452HIGHSuricata http1: repeated brotli compression bombs can cause excessive CPU consumptionEPSS 0.6%CVE-2026-63447HIGHSuricata ftp: crafted FTP traffic can cause quadratic CPU consumptionEPSS 0.6%CVE-2026-45763MEDIUMSuricata lua: sandbox allocation limit not enforced for new allocationsEPSS 0.6%CVE-2024-37151MEDIUMSuricata defrag: IP ID reuse can lead to policy bypassEPSS 0.6%CVE-2026-71418HIGHSuricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumptionEPSS 0.6%CVE-2026-22259HIGHSuricata dnp3: unbounded transaction growthEPSS 0.6%CVE-2026-45765HIGHSuricata dnp3: unbounded reassembly can lead to resource exhaustionEPSS 0.6%CVE-2026-45766HIGHSuricata nfs: unbounded stateful structures can lead to resource exhaustionEPSS 0.6%CVE-2026-45762HIGHSuricata defrag: missing address-family check can lead to remote crashEPSS 0.6%CVE-2024-47522HIGHSuricata ja4: invalid alpn leads to panicEPSS 0.6%CVE-2026-57226LOWSuricata swf: heap buffer overflow in SWF decompression depth handlingEPSS 0.6%CVE-2024-28870HIGHSuricata uses excessive resource use in malformed ssh traffic parsingEPSS 0.6%CVE-2026-22258HIGHSuricata DCERPC: unbounded fragment buffering leads to memory exhaustionEPSS 0.6%CVE-2026-22262MEDIUMSuricata datasets: stack overflow when saving a setEPSS 0.6%CVE-2026-22260HIGHSuricata http1: infinite recursion in decompressionEPSS 0.5%CVE-2026-94083CRITICALSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even thEPSS 0.5%CVE-2026-94084CRITICALSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with EPSS 0.5%