CVE-2024-55628

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-55628
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/OISF/suricata/commit/19cf0f81335d9f787d587450f7105ad95a648951 Patch
https://github.com/OISF/suricata/commit/37f4c52b22fcdde4adf9b479cb5700f89d00768d Patch
https://github.com/OISF/suricata/commit/3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d Patch
https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2j Vendor Advisory
https://redmine.openinfosecfoundation.org/issues/7280 Permissions Required
Configurations

Configuration 1 (hide)

cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
History

31 Mar 2025, 13:02

Type Values Removed Values Added
CWE NVD-CWE-Other
CPE cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
First Time Oisf suricata
Oisf
References () https://github.com/OISF/suricata/commit/37f4c52b22fcdde4adf9b479cb5700f89d00768d - () https://github.com/OISF/suricata/commit/37f4c52b22fcdde4adf9b479cb5700f89d00768d - Patch
References () https://github.com/OISF/suricata/commit/19cf0f81335d9f787d587450f7105ad95a648951 - () https://github.com/OISF/suricata/commit/19cf0f81335d9f787d587450f7105ad95a648951 - Patch
References () https://redmine.openinfosecfoundation.org/issues/7280 - () https://redmine.openinfosecfoundation.org/issues/7280 - Permissions Required
References () https://github.com/OISF/suricata/commit/3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d - () https://github.com/OISF/suricata/commit/3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d - Patch
References () https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2j - () https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2j - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

06 Jan 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-06 18:15

Updated : 2025-03-31 13:02

NVD link : CVE-2024-55628

Mitre link : CVE-2024-55628

JSON object : View

Products Affected

oisf

  • suricata
CWE
NVD-CWE-Other CWE-779

Logging of Excessive Data

CWE-405

Asymmetric Resource Consumption (Amplification)