Medium severity5.3NVD Advisory· Published Jul 23, 2018· Updated Jun 17, 2026

CVE-2016-10728

Description

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Suricata/Suricatallm-fuzzy
Range: <3.1.2
osv-coords
pkg:rpm/opensuse/suricata&distro=openSUSE%20Tumbleweed
Range: < 8.0.0-1.1

Patches

Vulnerability mechanics

References

lists.debian.org/debian-lts-announce/2018/09/msg00019.htmlnvdThird Party Advisory
redmine.openinfosecfoundation.org/issues/1880nvdThird Party Advisory
suricata-ids.org/2016/09/07/suricata-3-1-2-released/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000