CVE - CVE-2024-55627

CVE-ID
CVE-2024-55627	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow. The issue has been addressed in Suricata 7.0.8.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://github.com/OISF/suricata/commit/282509f70c4ce805098e59535af445362e3e9ebd URL:https://github.com/OISF/suricata/commit/282509f70c4ce805098e59535af445362e3e9ebd MISC:https://github.com/OISF/suricata/commit/8900041405dbb5f9584edae994af2100733fb4be URL:https://github.com/OISF/suricata/commit/8900041405dbb5f9584edae994af2100733fb4be MISC:https://github.com/OISF/suricata/commit/9a53ec43b13f0039a083950511a18bf6f408e432 URL:https://github.com/OISF/suricata/commit/9a53ec43b13f0039a083950511a18bf6f408e432 MISC:https://github.com/OISF/suricata/security/advisories/GHSA-h2mv-7gg8-8x7v URL:https://github.com/OISF/suricata/security/advisories/GHSA-h2mv-7gg8-8x7v MISC:https://redmine.openinfosecfoundation.org/issues/7393 URL:https://redmine.openinfosecfoundation.org/issues/7393
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20241209	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241209)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)