Vulnerabilidades em OISF

90 resultados
Análise Vexday

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2025-53538HIGHSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvationEPSS 0.5%CVE-2024-55629HIGHSuricata generic detection bypass using TCP urgent supportEPSS 0.5%CVE-2025-59150HIGHSuricata: Keyword tls.subjectaltname can lead to NULL-ptr derefEPSS 0.5%CVE-2024-45795HIGHSuricata detect/datasets: reachable assertion with unimplemented rule optionEPSS 0.5%CVE-2026-45752MEDIUMSuricata detect/transform: use-after-free in decompress transformsEPSS 0.5%CVE-2025-53537HIGHLibHTP's memory leak with lzma can lead to resource starvationEPSS 0.5%CVE-2026-45770HIGHSuricata lua: excessive flow variable registration can bypass sandboxEPSS 0.5%CVE-2026-46352HIGHSuricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockEPSS 0.5%CVE-2024-45796MEDIUMSuricata defrag: off by one can lead to policy bypassEPSS 0.5%CVE-2026-63448MEDIUMSuricata smb: some SMB flows can cause resource exhaustionEPSS 0.4%CVE-2026-22263MEDIUMSuricata http1: quadratic complexity in headers parsing over multiple packetsEPSS 0.4%CVE-2026-57222MEDIUMSuricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6EPSS 0.4%CVE-2025-64335HIGHSuricata is vulnerable to a null deref when used with base64_dataEPSS 0.4%CVE-2025-59148HIGHSuricata's improper use of entropy keyword can lead to a NULL-ptr derefEPSS 0.4%CVE-2026-57228HIGHSuricata smtp/mime: heap out-of-bounds read quoted-printable decoderEPSS 0.4%CVE-2026-45747HIGHSuricata lua/tls: null dereference in TlsGetCertInfoEPSS 0.4%CVE-2026-57229MEDIUMSuricata smtp/mime: incomplete state reset allows detection bypassEPSS 0.4%CVE-2026-22264HIGHSuricata detect/alert: heap-use-after-free on alert queue expansionEPSS 0.4%CVE-2026-57224MEDIUMSuricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustionEPSS 0.4%CVE-2026-45767MEDIUMSuricata datasets: save to absolute filename can be bypassed when combined with load commandEPSS 0.4%