CVE-2024-24568

CVSS V2 None CVSS V3 None

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.

Overview

CVE ID
CVE-2024-24568

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-02-26T15:54:52.314Z

Last Modified Date
2024-02-26T15:54:52.314Z

Weakness Enumerations

CWE	URL
CWE-284	http://cwe.mitre.org/data/definitions/284.html

References

Reference URL	Reference Tags
https://github.com/OISF/suricata/security/advisories/GHSA-gv29-5hqw-5h8c	x_refsource_CONFIRM
https://github.com/OISF/suricata/commit/478a2a38f54e2ae235f8486bff87d7d66b6307f0	x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/6717	x_refsource_MISC
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-24568
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24568

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 04:27:37				Added to TrackCVE