18-015 (March 13, 2018)

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

HP Intelligent Management Center (IMC)
1008709 - HPE Intelligent Management Center 'getSelInsBean' Expression Language Injection Vulnerability (CVE-2017-12490)
1008765 - Hewlett Packard Enterprise Intelligent Management Center Language Injection Remote Code Execution Vulnerabilities


HP Intelligent Management Center Dbman
1008790* - HPE Intelligent Management Center dbman Opcode 10012 Use-After-Free Remote Code Execution Vulnerability (CVE-2017-12561)


Instant Messenger Applications
1002163* - Yahoo! Messenger


Mail Server Exim
1008940 - Exim Buffer Overflow Remote Code Execution Vulnerability (CVE-2018-6789)


Microsoft Office
1008931 - Microsoft Office Memory Corruption Vulnerability (CVE-2018-0922)


OpenSSL
1006302* - OpenSSL TLS/DTLS SRTP Memory Leak Denial Of Service Vulnerability (CVE-2014-3513)


VoIP Smart
1008846 - Digium Asterisk PJSIP Contact Header Denial Of Service Vulnerability (CVE-2017-17850)


Web Application PHP Based
1008884* - PHP 'unserialize()' Function Denial Of Service Vulnerability (CVE-2015-4602)
1008890* - PHP 'unserialize()' Function Type Confusion Vulnerability (CVE-2015-4603)
1008664 - PHP finish_nested_data Function Heap Buffer Overflow Vulnerability (CVE-2017-12933)


Web Client Common
1008745* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB17-36) - 4
1008939 - Adobe Flash Player Multiple Security Vulnerabilities (APSB18-05)
1008829 - Foxit Reader Multiple Information Disclosure Vulnerabilities
1008762 - Git SSH URL Processing Command Execution Vulnerability (CVE-2017-1000117)
1004085* - Heuristic Detection Of Malicious PDF Documents - 3
1008930 - Microsoft Access Remote Code Execution Vulnerability (CVE-2018-0903)
1008897 - Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0855)
1008936 - Microsoft Windows Multiple Elevation Of Privilege Vulnerabilities (March-2018)


Web Client Internet Explorer/Edge
1008826* - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0758)
1008900 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0770)
1008922 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0872)
1008923 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0874)
1008929 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0893)
1008932 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0930)
1008933 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0933)
1008934 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0934)
1008935 - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2018-0935)
1008928 - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2018-0889)


Web Server Common
1000131* - HTTP Header Length Restriction
1005728* - Parameter Value Length Restriction


Web Server Miscellaneous
1008794* - Apache Struts2 Jackson JSON Library Deserializer Remote Code Execution Vulnerability (CVE-2017-7525)
1008527 - Nginx ngx_http_range_filter_module Integer Overflow Vulnerability (CVE-2017-7529)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.