USN-8766-1: Suricata-Update vulnerability
AI Summary
Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory.
Discussion
Sign in to join the discussion.
Loading comments…