Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
References
Configurations
History
19 Dec 2024, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/OISF/suricata/security/advisories/GHSA-gv29-5hqw-5h8c - Vendor Advisory | |
| References | () https://redmine.openinfosecfoundation.org/issues/6717 - Issue Tracking | |
| References | () https://github.com/OISF/suricata/commit/478a2a38f54e2ae235f8486bff87d7d66b6307f0 - Patch | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ - Mailing List | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| CPE | cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| First Time |
Oisf suricata
Fedoraproject Fedoraproject fedora Oisf |
07 Mar 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Feb 2024, 16:32
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-26 16:27
Updated : 2024-12-19 19:30
NVD link : CVE-2024-24568
Mitre link : CVE-2024-24568
JSON object : View
Products Affected
oisf
- suricata
fedoraproject
- fedora
CWE