Lucene search
HistoryJul 11, 2024 - 3:15 p.m.
CVE-2024-38536
suricata
network security
memory allocation
upgrade
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.6%
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due to http.memcap being reached leads to a NULL-ptr reference leading to a crash. Upgrade to 7.0.6.
Affected configurations
Node
oisfsuricataRange<7.0.6
Related
osv
osv
CVE-2024-38536
2024-07-11 15:15:12
cvelist
cvelist
redhatcve
redhatcve
CVE-2024-38536
2024-07-11 15:35:38
debiancve
debiancve
CVE-2024-38536
2024-07-11 15:15:12
vulnrichment
vulnrichment
cve
cve
CVE-2024-38536
2024-07-11 15:15:12
ubuntucve
ubuntucve
CVE-2024-38536
2024-07-11 00:00:00
alpinelinux
alpinelinux
CVE-2024-38536
2024-07-11 15:15:12
nessus
nessus
Photon OS 4.0: Suricata PHSA-2024-4.0-0656
2024-07-24 00:00:00
Photon OS 5.0: Suricata PHSA-2024-5.0-0326
2024-07-24 00:00:00
mageia
mageia
Updated suricata packages fix security vulnerabilities
2024-09-17 05:41:21
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0306)
2024-09-17 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0656
2024-07-23 00:00:00
Important Photon OS Security Update - PHSA-2024-5.0-0326
2024-07-23 00:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
21.6%
Related for NVD:CVE-2024-38536