Vulnerability in Suricata Network Security Monitoring Engine

CVE-2024-55628

What is CVE-2024-55628?

Suricata, an advanced network intrusion detection and prevention system, suffers from an issue regarding DNS resource name compression. In versions preceding 7.0.8, this vulnerability allows for the generation of large DNS messages with excessively lengthy hostnames, causing significant strain during decoding processes. Although existing limits were intended to mitigate this risk, they proved insufficiently strict, resulting in the potential creation of substantial DNS log entries that can overload system resources. The issue has been resolved in the latest version, enhancing the handling of DNS messages.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References