CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!

CVE-2024-23836: crafted traffic can cause denial of service

7.5 CVSS

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.

Classification

CVE ID: CVE-2024-23836

CVSS Base Severity: HIGH

CVSS Base Score: 7.5

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor: OISF

Product: suricata

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.17% (probability of being exploited)

EPSS Percentile: 55.41% (scored less or equal to compared to others)

EPSS Date: 2025-03-14 (when was this score calculated)

References

Timeline

2025-02-14 00:31:37 UTC
CVE

crafted traffic can cause denial of service