Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2024-32867
HistoryMay 07, 2024 - 3:15 p.m.

CVE-2024-32867

2024-05-0715:15:09
Alpine Linux Development Team
security.alpinelinux.org
8
suricata
network intrusion detection
cve-2024-32867
vulnerability
fragmentation
anomaly
policy
unix

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

OSVersionArchitecturePackageVersionFilename
Alpine3.20-communitynoarchsuricata< 7.0.6-r0UNKNOWN

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

6.8

Confidence

Low