CVE-2024-55626

Low

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF filter file provided to Suricata at startup can lead to a buffer overflow at Suricata startup. The issue has been addressed in Suricata 7.0.8.

SeverityLow
CVSS3.3
Exploit probability—
ProductOisf Suricata
PublishedJan 6, 2025
First seenJan 6, 2025
Weakness typeCWE-680CWE-680

How to fix

Update
  • oisf suricata7.0.8 or later

Affected products

ProductAffected versionsFixed in
oisf suricatav < 7.0.87.0.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.