TCP Signature Bypass in Suricata by OISF
CVE-2019-18625

7.5HIGH

Key Information:

Vendor: Suricata-ids
Status: Suricata
Vendor: CVE Published:; 6 January 2020

🔔 Create Suricata-ids Vulnerability Alert

What is CVE-2019-18625?

A vulnerability in Suricata 5.0.0 allows an attacker to bypass TCP-based signatures by simulating a closed TCP session using malicious servers. This is executed by injecting erroneous RST ACK and FIN ACK packets with a faulty TCP Timestamp option following a TCP SYN packet. Clients on both Linux and Windows platforms fail to recognize the injected packets due to this improper timestamp handling, potentially compromising network security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch