CVE-2023-35853
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
In Suricata before version 6.0.13, an adversary controlling an external source of Lua rules may be able to execute Lua code. This issue is addressed in version 6.0.13 by disabling Lua unless the allow-rules option is set to true in the Lua security configuration section.
Risk Assessment
The ability to execute unauthorized Lua code poses a serious threat to the integrity and security of the system. Attackers may exploit this vulnerability to gain control over the system or introduce malicious software.
Recommendation
It is recommended to upgrade Suricata to version 6.0.13 or later and to review the Lua security configuration to ensure that the allow-rules option is set appropriately.
Original NVD description (English source)
In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling Lua unless allow-rules is true in the security lua configuration section.