5.3

CVE-2018-6794: debian debian_linux Protection Mechanism Failure

CVSS: 5.3v3.0MediumModified
AliasesUBUNTU-CVE-2018-6794DEBIAN-CVE-2018-6794
Published 07-02-2018Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2018-6794 is a medium (CVSS 5.3) Protection Mechanism Failure vulnerability in debian debian_linux. EPSS estimates a 23.69% chance of exploitation in the next 30 days, higher than 97.8% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
36/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.0 (NVD)
EPSS score
23.69%
0%100%
High · -0.32 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1exploit-database

Advisory lineage

Upstream 0 · Downstream 1
DLA-1603-1

Timeline

  1. 07-02-2018
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI utilities, but ignored by Suricata IDS signatures. This mostly affects IDS signatures for the HTTP protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual.

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

23.69%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

-0.32 pp

From 24.00% on 21-09-2026

21-09-202621-10-2026
EPSS score
23.69%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • exploit-databasedosmultipleUnverified

    Suricata < 4.0.4 - IDS Detection Bypass

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Debian2 products
Suricata-ids1 product
Ubuntu1 product
  • suricataAll versions (No fix recorded)

3 vendors · 4 products

References

8 links