Severity by source
Network-reachable via crafted traffic (AV:N), high complexity due to hash collision requirement (AC:H), no privileges or interaction needed; integrity-only impact from detection bypass.
Lifecycle Timeline
1DescriptionCVE.org
[ippair: IPv4/IPv6 hash collision can reuse wrong IPPair state]
AnalysisAI
IPv4/IPv6 hash collision in Suricata's IPPair tracking mechanism causes the engine to reuse state belonging to the wrong IP pair, leading to incorrect stateful evaluation of network traffic. The vulnerability affects deployments where both IPv4 and IPv6 traffic is processed and IPPair-based rules or datasets are active. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the Suricata deployment processes both IPv4 and IPv6 traffic simultaneously (dual-stack environment), and that at least one active ruleset uses IPPair-dependent keywords such as 'iprep', 'dataset', or threshold directives tied to IP pairs. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Without a formal CVSS vector, risk must be inferred from the technical description. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to the patched version of Suricata as released by the upstream project or via the Ubuntu package repositories. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today