Vulnerabilidades em OISF

55 resultados
Análise Vexday

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2024-45795HIGHSuricata detect/datasets: reachable assertion with unimplemented rule optionEPSS 0.5%CVE-2026-22259HIGHSuricata dnp3: unbounded transaction growthEPSS 0.5%CVE-2026-22260HIGHSuricata http1: infinite recursion in decompressionEPSS 0.5%CVE-2025-59150HIGHSuricata: Keyword tls.subjectaltname can lead to NULL-ptr derefEPSS 0.5%CVE-2026-22258HIGHSuricata DCERPC: unbounded fragment buffering leads to memory exhaustionEPSS 0.5%CVE-2024-45796MEDIUMSuricata defrag: off by one can lead to policy bypassEPSS 0.5%CVE-2026-22262MEDIUMSuricata datasets: stack overflow when saving a setEPSS 0.5%CVE-2025-53538HIGHSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvationEPSS 0.4%CVE-2025-53537HIGHLibHTP's memory leak with lzma can lead to resource starvationEPSS 0.4%CVE-2025-64335HIGHSuricata is vulnerable to a null deref when used with base64_dataEPSS 0.4%CVE-2025-59148HIGHSuricata's improper use of entropy keyword can lead to a NULL-ptr derefEPSS 0.4%CVE-2026-22263MEDIUMSuricata http1: quadratic complexity in headers parsing over multiple packetsEPSS 0.4%CVE-2025-64332HIGHSuricata is vulnerable to a stack overflow on larger compressed dataEPSS 0.4%CVE-2025-64330HIGHSuricata is vulnerable to a heap buffer overflow on verdictEPSS 0.4%CVE-2026-31933HIGHSuricata stream: quadratic complexity in stream inspectionEPSS 0.4%CVE-2026-31937HIGHSuricata dcerpc: quadratic complexity in dcerpc bufferingEPSS 0.4%CVE-2026-31931HIGHSuricata tls: null dereference in tls.alpn rule keywordEPSS 0.4%CVE-2025-59147HIGHSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN PacketsEPSS 0.3%CVE-2025-64344HIGHSuricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBufferEPSS 0.3%CVE-2025-64334HIGHSuricata is vulnerable to unbounded memory growth for decompressionEPSS 0.3%