The DER parser in Suricata before 2.0.8 allows remote attackers to cause a denial of service (crash) via vectors related to SSL/TLS certificates.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0971
Reference (s):
- http://suricata-ids.org/2015/05/06/suricata-2-0-8-available/
- DEBIAN:DSA-3254
- URL: http://www.debian.org/security/2015/dsa-3254