CVE - CVE-2024-23836

CVE-ID
CVE-2024-23836	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
FEDORA:FEDORA-2024-7b063bce0a URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/ FEDORA:FEDORA-2024-bd4eed8466 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/ MISC:https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7 URL:https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7 MISC:https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747 URL:https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747 MISC:https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7 URL:https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7 MISC:https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc URL:https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc MISC:https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97 URL:https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97 MISC:https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8 URL:https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8 MISC:https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786 URL:https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786 MISC:https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5 URL:https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5 MISC:https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01 URL:https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01 MISC:https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af URL:https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af MISC:https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc URL:https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc MISC:https://redmine.openinfosecfoundation.org/issues/6531 URL:https://redmine.openinfosecfoundation.org/issues/6531 MISC:https://redmine.openinfosecfoundation.org/issues/6532 URL:https://redmine.openinfosecfoundation.org/issues/6532 MISC:https://redmine.openinfosecfoundation.org/issues/6540 URL:https://redmine.openinfosecfoundation.org/issues/6540 MISC:https://redmine.openinfosecfoundation.org/issues/6658 URL:https://redmine.openinfosecfoundation.org/issues/6658 MISC:https://redmine.openinfosecfoundation.org/issues/6659 URL:https://redmine.openinfosecfoundation.org/issues/6659 MISC:https://redmine.openinfosecfoundation.org/issues/6660 URL:https://redmine.openinfosecfoundation.org/issues/6660
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20240122	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240122)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)