Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2024-32867
PUBLISHED
More InfoOfficial Page
Assigner-GitHub_M
Assigner Org ID-a0819718-46f1-4df5-94e2-005712e83aaa
View Known Exploited Vulnerability (KEV) details
Published At-07 May, 2024 | 15:06
Updated At-02 Aug, 2024 | 02:20
Rejected At-
▼CVE Numbering Authority (CNA)
Suricata's defrag contains various issues leading to policy bypass

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

Affected Products
Vendor
OISF
Product
suricata
Versions
Affected
  • >= 6.0.0, <= 6.0.18
  • >= 7.0.0, <= 7.0.4
Problem Types
TypeCWE IDDescription
CWECWE-754CWE-754: Improper Check for Unusual or Exceptional Conditions
Type: CWE
CWE ID: CWE-754
Description: CWE-754: Improper Check for Unusual or Exceptional Conditions
Metrics
VersionBase scoreBase severityVector
3.15.3MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Version: 3.1
Base score: 5.3
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
x_refsource_CONFIRM
https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
x_refsource_MISC
https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
x_refsource_MISC
https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
x_refsource_MISC
https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
x_refsource_MISC
https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
x_refsource_MISC
https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/6672
x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/6673
x_refsource_MISC
https://redmine.openinfosecfoundation.org/issues/6677
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
Resource:
x_refsource_CONFIRM
Hyperlink: https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
Resource:
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
Resource:
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
Resource:
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
Resource:
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
Resource:
x_refsource_MISC
Hyperlink: https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
Resource:
x_refsource_MISC
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6672
Resource:
x_refsource_MISC
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6673
Resource:
x_refsource_MISC
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6677
Resource:
x_refsource_MISC
▼Authorized Data Publishers (ADP)
1. CISA ADP Vulnrichment
Affected Products
Vendor
oisf
Product
suricata
CPEs
  • cpe:2.3:a:oisf:suricata:-:*:*:*:*:*:*:*
Default Status
unknown
Versions
Affected
  • >= 6.0.0, <= 6.0.18, >= 7.0.0, <= 7.0.4
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
2. CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
x_refsource_CONFIRM
x_transferred
https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
x_refsource_MISC
x_transferred
https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
x_refsource_MISC
x_transferred
https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
x_refsource_MISC
x_transferred
https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
x_refsource_MISC
x_transferred
https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
x_refsource_MISC
x_transferred
https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
x_refsource_MISC
x_transferred
https://redmine.openinfosecfoundation.org/issues/6672
x_refsource_MISC
x_transferred
https://redmine.openinfosecfoundation.org/issues/6673
x_refsource_MISC
x_transferred
https://redmine.openinfosecfoundation.org/issues/6677
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6672
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6673
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://redmine.openinfosecfoundation.org/issues/6677
Resource:
x_refsource_MISC
x_transferred
Details not found