Aller au contenu
Se connecter
5.3 Moyenne

CVE-2024-37151 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.

Produits et versions touchés

Produit Versions touchées Corrigé en
suricata 7.0 7.0.0 → < 7.0.6 7.0.6
suricata 6.0 6.0.0 → < 6.0.20 6.0.20

Autres CVE de suricata

Les 86 CVE de suricata →
CVE-2026-94084 Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use… 9.4 Critique CVE-2026-94083 Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state… 9.4 Critique CVE-2026-71855 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 5.9 Moyenne CVE-2026-71418 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 7.5 Élevée
Suivre cette CVE