Rule Update

18-028 (May 22, 2018)


  DESCRIPTION

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

DHCP Client
1009116 - DHCP Client Script Code Execution Vulnerability (CVE-2018-1111) - 1


DHCP Client - Incoming
1009114 - DHCP Client Script Code Execution Vulnerability (CVE-2018-1111)


DNS Server
1008652* - DNSmasq Answer Auth And Answer Request Integer Underflow Vulnerability (CVE-2017-13704)


Microsoft Office
1009052 - Microsoft Excel Remote Code Execution Vulnerability (CVE-2018-0796)


Web Application Common
1005613* - Generic SQL Injection Prevention - 2
1009090 - ImageMagick ReadOneMNGImage Denial Of Service Vulnerability (CVE-2018-10177) - 1
1009057* - Pivotal Spring Data Commons Remote Code Execution Vulnerability (CVE-2018-1273)


Web Application PHP Based
1009054* - Drupal Core Remote Code Execution Vulnerability (CVE-2018-7602)


Web Client Common
1008739* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB17-36) - 1
1009092 - Foxit PDF Reader JavaScript 'XFA Clone' Remote Code Execution Vulnerability (CVE-2018-3850)
1009091 - Foxit PDF Reader Javascript 'Search Query' Remote Code Execution Vulnerability (CVE-2017-14458)
1009089 - ImageMagick ReadOneMNGImage Denial Of Service Vulnerability (CVE-2018-10177)


Web Client Internet Explorer/Edge
1008700* - Microsoft Internet Explorer And Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-11837)
1009047 - Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2018-0929)
1008935* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2018-0935)


Web Client Mozilla Firefox
1008951 - Mozilla Firefox Buffer Overflow Parsing HTML5 Fragments Vulnerability (CVE-2016-2819)


Web Server Common
1008646 - Detect Illegal Characters In URI
1000128* - HTTP Protocol Decoding
1005839* - Identified XML External Entity Injection In HTTP Request


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.