Vulnerability in Suricata Network Security Monitoring Engine

CVE-2024-55628

What is CVE-2024-55628?

Suricata, an advanced network intrusion detection and prevention system, suffers from an issue regarding DNS resource name compression. In versions preceding 7.0.8, this vulnerability allows for the generation of large DNS messages with excessively lengthy hostnames, causing significant strain during decoding processes. Although existing limits were intended to mitigate this risk, they proved insufficiently strict, resulting in the potential creation of substantial DNS log entries that can overload system resources. The issue has been resolved in the latest version, enhancing the handling of DNS messages.

References