CVE - CVE-2024-32663

CVE-ID
CVE-2024-32663	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19. Workarounds include disabling the HTTP/2 parser and reducing `app-layer.protocols.http2.max-table-size` value (default is 65536).
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/OISF/suricata/commit/08d93f7c3762781b743f88f9fdc4389eb9c3eb64 URL:https://github.com/OISF/suricata/commit/08d93f7c3762781b743f88f9fdc4389eb9c3eb64 MISC:https://github.com/OISF/suricata/commit/c0af92295e833d1db29b184d63cd3b829451d7fd URL:https://github.com/OISF/suricata/commit/c0af92295e833d1db29b184d63cd3b829451d7fd MISC:https://github.com/OISF/suricata/commit/d24b37a103c04bb2667e449e080ba4c8e56bb019 URL:https://github.com/OISF/suricata/commit/d24b37a103c04bb2667e449e080ba4c8e56bb019 MISC:https://github.com/OISF/suricata/commit/e68ec4b227d19498f364a41eb25d3182f0383ca5 URL:https://github.com/OISF/suricata/commit/e68ec4b227d19498f364a41eb25d3182f0383ca5 MISC:https://github.com/OISF/suricata/security/advisories/GHSA-9jxm-qw9v-266r URL:https://github.com/OISF/suricata/security/advisories/GHSA-9jxm-qw9v-266r MISC:https://redmine.openinfosecfoundation.org/issues/6892 URL:https://redmine.openinfosecfoundation.org/issues/6892 MISC:https://redmine.openinfosecfoundation.org/issues/6900 URL:https://redmine.openinfosecfoundation.org/issues/6900
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20240416	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240416)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)