Field Assessment
AI analysis pending.
CVE
CVE-2018-10244
Severity
CRITICAL
CVSS
9.8
EPSS
1.65%
Original Filing — NVD Description
Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can cause the parsing code to read beyond the allocated data because DecodeENIPPDU in app-layer-enip-commmon.c has an integer overflow during a length check.