CVE-2024-38535: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

High severity · published Jul 11, 2024

CVE-2024-38535

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

7.5

CVSS

1.2%

EPSS

On KEV

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Suricata can run out of memory when parsing crafted HTTP/2 traffic. Upgrade to 6.0.20 or 7.0.6.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.2% · higher than 67% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Suricata · Oisf

before 6.0.20; 7.0.0 before 7.0.6 · source: NVD

Affected product

Suricata

Oisf

All Suricata CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2024-38535

CVE.org

https://www.cve.org/CVERecord?id=CVE-2024-38535

Patch

https://github.com/OISF/suricata/commit/62d5cac1b8483d5f9d2b79833a4e59f5d80129b7

Patch

https://github.com/OISF/suricata/commit/c82fa5ca0d1ce0bd8f936e0b860707a6571373b2

Vendor Advisory

https://github.com/OISF/suricata/security/advisories/GHSA-cg8j-7mwm-v563

Permissions Required

https://redmine.openinfosecfoundation.org/issues/7104

Issue Tracking

https://redmine.openinfosecfoundation.org/issues/7105

Issue Tracking

https://redmine.openinfosecfoundation.org/issues/7112