CVE-2016-10728

An issue was discovered in Suricata before 3.1.2. If an ICMPv4 error packet is received as the first packet on a flow in the to_client direction, it confuses the rule grouping lookup logic. The toclient inspection will then continue with the wrong rule group. This can lead to missed detection.

• CWE-20

• https://github.com/kirillwow/ids_bypassExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00019.htmlThird Party Advisory
• https://redmine.openinfosecfoundation.org/issues/1880Third Party Advisory
• https://suricata-ids.org/2016/09/07/suricata-3-1-2-released/Vendor Advisory
• https://github.com/kirillwow/ids_bypassExploit, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2018/09/msg00019.htmlThird Party Advisory
• https://redmine.openinfosecfoundation.org/issues/1880Third Party Advisory
• https://suricata-ids.org/2016/09/07/suricata-3-1-2-released/Vendor Advisory

Published

Jul 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-10722partclone.fat in Partclone before 0.2.88 is prone to a heap-…9.8
• CVE-2016-10723An issue was discovered in the Linux kernel through 4.17.2. …
• CVE-2016-10724Bitcoin Core before v0.13.0 allows denial of service (memory…
• CVE-2016-10725In Bitcoin Core before v0.13.0, a non-final alert is able to…
• CVE-2016-10726The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and …
• CVE-2016-10727camel/providers/imapx/camel-imapx-server.c in the IMAPx comp…
• CVE-2016-10729An issue was discovered in Amanda 3.3.1. A user with backup …
• CVE-2016-1073Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat…
• CVE-2016-10730An issue was discovered in Amanda 3.3.1. A user with backup …
• CVE-2016-10731ProjectSend (formerly cFTP) r582 allows SQL injection via ma…
• CVE-2016-10732ProjectSend (formerly cFTP) r582 allows authentication bypas…
• CVE-2016-10733ProjectSend (formerly cFTP) r582 allows directory traversal …