by Kastro
Paper/Archive/CVE-2023-35853

CVE-2023-35853

mitre — In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code.

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 63.8.638 × 2012.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refgithub.com/OISF/suricata/compare/suricata-6.0.12...suricata-6.0.13refstamus-networks.com/stamus-labsrefgithub.com/OISF/suricata/commit/b95bbcc66db526ffcc880eb439dbe8abc87a81da