CVE Catalog
CVE-2015-8954
CriticalSummary
The MemcmpLowercase function in Suricata before version 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.
Risk Assessment
The organization may be exposed to attacks that bypass security mechanisms, potentially leading to unauthorized access to systems.
Recommendation
It is recommended to update Suricata to version 2.0.6 or later to mitigate this vulnerability.
Original NVD description (English source)
The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request.