ICMPv4 Error Packet Issue in Suricata Before 3.1.2
CVE-2016-10728

5.3MEDIUM

Key Information:

Vendor: Suricata-ids
Status: Suricata
Vendor: CVE Published:; 23 July 2018

🔔 Create Suricata-ids Vulnerability Alert

What is CVE-2016-10728?

A flaw in Suricata prior to version 3.1.2 manifests when an ICMPv4 error packet is processed as the first packet of a flow towards the client. This leads to confusion within the rule grouping lookup logic, resulting in incorrect rule group applications during to-client inspections. Consequently, this oversight may allow for undetected threats, compromising the effective monitoring and security of network traffic.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch