High severity7.5NVD Advisory· Published Jan 6, 2020· Updated Jun 17, 2026
CVE-2019-18625
CVE-2019-18625
Description
An issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based signature by faking a closed TCP session using an evil server. After the TCP SYN packet, it is possible to inject a RST ACK and a FIN ACK packet with a bad TCP Timestamp option. The client will ignore the RST ACK and the FIN ACK packets because of the bad TCP Timestamp option. Both linux and windows client are ignoring the injected packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Suricata/Suricatadescription
Patches
Vulnerability mechanics
References
5- github.com/OISF/suricata/commit/9f0294fadca3dcc18c919424242a41e01f3e8318nvdPatchThird Party Advisory
- github.com/OISF/suricata/commit/ea0659de7640cf6a51de5bbd1dbbb0414e4623a0nvdPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2020/01/msg00032.htmlnvdMailing ListThird Party Advisory
- redmine.openinfosecfoundation.org/issues/3286nvdThird Party Advisory
- redmine.openinfosecfoundation.org/issues/3395nvdThird Party Advisory
News mentions
0No linked articles in our index yet.