TCP Evasion Vulnerability in Suricata by Open Information Security Foundation
CVE-2021-37592
9.8CRITICAL
What is CVE-2021-37592?
Suricata versions prior to 5.0.8 and those in the 6.x series before 6.0.4 exhibit a vulnerability that permits TCP evasion. This issue arises when a client uses a specially crafted TCP/IP stack capable of transmitting a specific sequence of segments. Attackers might exploit this vulnerability to bypass security mechanisms, posing significant risks to network integrity and security.