CVE-2024-28870

CVSS V2 None CVSS V3 None

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in alert records. This issue has been patched in versions 6.0.17 and 7.0.4.

Overview

CVE ID
CVE-2024-28870

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-04-03T21:13:48.470Z

Last Modified Date
2024-04-03T21:13:48.470Z

Weakness Enumerations

CWE	URL
CWE-770	http://cwe.mitre.org/data/definitions/770.html

References

Reference URL	Reference Tags
https://github.com/OISF/suricata/security/advisories/GHSA-mhhx-xw7r-r5c8	x_refsource_CONFIRM

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-28870
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-28870

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 08:06:37				Added to TrackCVE