CVE-2019-10050 Memory corruption in n/a
An attacker can cause a crash in Suricata by sending a specially crafted MPLS packet that triggers a buffer over-read.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2019-10050?
CVE-2019-10050 is a high-severity memory corruption vulnerability in Oisf Suricata, published on 13 May 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed only of a packet of source address and destination address plus the correct type field and the right number for shim, an attacker can manipulate the control flow, such that the condition to leave the loop is true. After leaving the loop, the network packet has a length of 2 bytes. There is no validation of this length. Later on, the code tries to read at an empty position, leading to a crash.
Weakness: CWE-125
Which versions are affected by CVE-2019-10050?
It affects 1 product.
Products include Oisf Suricata.
How do I fix CVE-2019-10050?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-10050 being exploited?
There is no known exploitation of CVE-2019-10050 in the wild and no public exploit code.
Other vulnerabilities in Oisf Suricata
Sources
Also known as DEBIAN-CVE-2019-10050, GHSA-25q8-m23x-4242, UBUNTU-CVE-2019-10050.