Buffer Overflow Vulnerability in Suricata Network Monitoring Engine
CVE-2024-55627

7.5HIGH

Key Information:

Vendor

OISF

Status
Suricata
Vendor
CVE Published:
6 January 2025

What is CVE-2024-55627?

A buffer overflow vulnerability exists in the Suricata network monitoring engine due to an unsigned integer underflow when handling specially crafted TCP streams. This issue occurs during the initialization phase with memset, leading to a risk of excessive memory allocation. The vulnerability has been addressed in Suricata version 7.0.8, and users are urged to upgrade their installations to mitigate potential exploitation.

References

https://github.com/OISF/suricata/commit/282509f70c4ce8050...
https://github.com/OISF/suricata/commit/8900041405dbb5f95...
https://github.com/OISF/suricata/commit/9a53ec43b13f0039a...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-55627 : Buffer Overflow Vulnerability in Suricata Network Monitoring Engine