CyberRota Analysis
AI-GeneratedThe SIP parser in Suricata versions 8.0.0 to 8.0.6 is vulnerable due to the use of 16-bit fields for storing request and response body lengths, which can lead to truncation of SIP bodies larger than 65,536 bytes. This vulnerability allows portions of the SIP body to evade detection, potentially enabling malicious content to bypass security measures. Organizations using affected versions of Suricata should prioritize upgrading to version 8.0.6 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body lengths in 16-bit fields. A SIP body larger than 65,536 bytes can truncate the length and prevent frame:request.body or frame:response.body from exposing the complete body to inspection, allowing content in the omitted portion to evade frame-based detection. This issue is fixed in version 8.0.6.
Related CVEs
Other vulnerabilities affecting the same vendor(s)