Directory Traversal Vulnerability in Suricata by Open Information Security Foundation

CVE-2023-35852

What is CVE-2023-35852?

A directory traversal vulnerability exists in Suricata prior to version 6.0.13, whereby a malformed dataset filename sourced from malicious rules can potentially allow an adversary to manipulate file paths, leading to unauthorized access and write privileges on the local filesystem. This security flaw is addressed in version 6.0.13, which mandates specific configurations—namely, 'allow-absolute-filenames' and 'allow-write'—when installations require such traversal or writing capabilities. It's crucial for users to update their Suricata installation to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References