CVE-2024-23839

2024-02-2616:27:58

Debian Security Bug Tracker

security-tracker.debian.org

suricata

network security

intrusion detection

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

AI Score

Confidence

High

EPSS

Percentile

15.5%

JSON

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.request_header and http.response_header keywords.

OSVersionArchitecturePackageVersionFilename
Debian12allsuricata< 1:6.0.10-1suricata_1:6.0.10-1_all.deb
Debian11allsuricata< 1:6.0.1-3suricata_1:6.0.1-3_all.deb
Debian999allsuricata< 1:7.0.3-1suricata_1:7.0.3-1_all.deb
Debian13allsuricata< 1:7.0.3-1suricata_1:7.0.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	suricata	< 1:6.0.10-1	suricata_1:6.0.10-1_all.deb
Debian	11	all	suricata	< 1:6.0.1-3	suricata_1:6.0.1-3_all.deb
Debian	999	all	suricata	< 1:7.0.3-1	suricata_1:7.0.3-1_all.deb
Debian	13	all	suricata	< 1:7.0.3-1	suricata_1:7.0.3-1_all.deb