CVE-2021-45098

An issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based signature by faking an RST TCP packet with random TCP options of the md5header from the client side. After the three-way handshake, it's possible to inject an RST ACK with a random TCP md5header option. Then, the client can send an HTTP GET request with a forbidden URL. The server will ignore the RST ACK and send the response HTTP packet for the client's request. These packets will not trigger a Suricata reject action.

• https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942Release Notes, Vendor Advisory
• https://github.com/OISF/suricata/commit/50e2b973eeec7172991bf8f544ab06fb782b97dfPatch, Third Party Advisory
• https://github.com/OISF/suricata/releasesRelease Notes, Third Party Advisory
• https://redmine.openinfosecfoundation.org/issues/4710Exploit, Issue Tracking, Patch, Vendor Advisory
• https://forum.suricata.io/t/suricata-6-0-4-and-5-0-8-released/1942Release Notes, Vendor Advisory
• https://github.com/OISF/suricata/commit/50e2b973eeec7172991bf8f544ab06fb782b97dfPatch, Third Party Advisory
• https://github.com/OISF/suricata/releasesRelease Notes, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html
• https://redmine.openinfosecfoundation.org/issues/4710Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Dec 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-45091Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorr…4.3
• CVE-2021-45092Thinfinity VirtualUI before 3.0 has functionality in /lab.ht…9.8
• CVE-2021-45094Imprivata Privileged Access Management (formally Xton Privil…5.4
• CVE-2021-45095pep_sock_accept in net/phonet/pep.c in the Linux kernel thro…5.5
• CVE-2021-45096KNIME Analytics Platform before 4.5.0 is vulnerable to XXE (…4.3
• CVE-2021-45097KNIME Server before 4.12.6 and 4.13.x before 4.13.4 (when in…5.5
• CVE-2021-45099The addon.stdin service in addon-ssh (aka Home Assistant Com…8.8
• CVE-2021-45100The ksmbd server through 3.4.2, as used in the Linux kernel …7.5
• CVE-2021-45101An issue was discovered in HTCondor before 8.8.15, 9.0.x bef…8.1
• CVE-2021-45102An issue was discovered in HTCondor 9.0.x before 9.0.4 and 9…8.8
• CVE-2021-45103An issue was discovered in HTCondor 9.0.x before 9.0.10 and …8.1
• CVE-2021-45104An issue was discovered in HTCondor 9.0.x before 9.0.10 and …7.4