suricata-ids suricata

Name: suricata-ids suricata
Brand: suricata-ids

productUS

cpe:2.3:a:suricata-ids:suricata:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical7high3medium0low

updated 2026-10-28

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-6794US	medium5.3	23.7% (98th)	Exploit	4.0.4	2018-02-07	< 4.0.4
CVE-2018-18956US	high7.5	2.79% (86th)	—	4.0.6	2018-11-05	4.0.0 → 4.0.6
CVE-2019-16410US	critical9.1	2.14% (82nd)	—	no fix	2019-09-24	= 4.1.4
CVE-2019-10051US	high7.5	2.13% (82nd)	—	no fix	2019-08-28	2 versions
CVE-2019-10052US	high7.5	2.11% (82nd)	—	no fix	2019-08-28	= 4.1.3
CVE-2016-10728US	medium5.3	2.09% (82nd)	—	3.1.2	2018-07-23	< 3.1.2
CVE-2019-16411US	critical9.8	2.03% (81st)	—	no fix	2019-09-24	= 4.1.4
CVE-2018-14568US	high7.5	2.00% (81st)	—	4.0.5	2018-07-23	< 4.0.5
CVE-2019-10053US	critical9.8	1.71% (77th)	—	4.1.4	2019-05-13	4.1.0 → 4.1.4
CVE-2019-15699US	critical9.1	1.65% (76th)	—	no fix	2019-09-24	= 4.1.4
CVE-2019-10055US	high7.5	1.46% (73rd)	—	no fix	2019-08-28	= 4.1.4
CVE-2019-10056US	high7.5	1.40% (72nd)	—	no fix	2019-08-28	2 versions
CVE-2019-10054US	high7.5	1.40% (72nd)	—	no fix	2019-08-28	= 4.1.3
CVE-2019-17420US	medium5.3	1.35% (72nd)	—	no fix	2019-10-10	= 4.1.4

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read4 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-300Channel Accessible by Non-Endpoint1 CVEs
CWE-435Improper Interaction Between Multiple Correctly-Behaving Entities1 CVEs
CWE-459Incomplete Cleanup1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.