An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invalid memory access and the program crashes within the nfs/nfs3.rs file.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Suricata | Suricata-ids | 4.1.3 (including) | 4.1.3 (including) |
| Suricata | Ubuntu | bionic | * |
| Suricata | Ubuntu | disco | * |
| Suricata | Ubuntu | eoan | * |
| Suricata | Ubuntu | trusty | * |
| Suricata | Ubuntu | xenial | * |