CVE-2024-55605

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

CVE-2024-55605

CVE-2024-55605 affects Suricata prior to 7.0.8, where a large input buffer used by multiple transforms (to_lowercase, to_uppercase, strip_whitespace, compress_whitespace, dotprefix, header_lowercase, strip_pseudo_headers, url_decode, xor) can cause a stack overflow and crash. The vulnerability is...

CVE-2024-55605 Suricata allows stack overflow in transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

CVE-2024-55605 Suricata allows stack overflow in transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

CVE-2024-55605

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large input buffer to the tolowercase, touppercase, stripwhitespace, compresswhitespace, dotprefix, headerlowercase, strippseudoheaders, urldecode, or xor...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from the fact that TCP streams with TCP emergency data out-of-band data may cause Suricata to analyze the data differently th...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from a large BPF filter file provided to Suricata at startup that could cause a buffer overflow when Suricata starts...

Suricata 资源管理错误漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A resource management error vulnerability exists in Suricata versions prior to 7.0.8. An attacker exploiting this vulnerability could cause a stack overflow, which could lead to a crash in Suricata...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8, which stems from an unsigned integer underflow, where a specially crafted TCP stream may cause a very large buffer overflow when padded...

Suricata 安全漏洞

Suricata is a network IDS, IPS and NSM engine from the Open Information Security Foundation. A security vulnerability exists in Suricata versions prior to 7.0.8 that stems from the fact that DNS resource name compression may result in small DNS messages containing very large contained hostnames...

PT-2025-11968 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue concerns a problem where the decode base64 signature can cause large memory allocation. This could potentially lead to issues with the Suricata package in Debian Linux...

PT-2025-11966 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue is related to the af-packet defrag option, which can lead to truncated packets. This affects Suricata in Debian Linux. No information is provided about the estimated...

PT-2025-11969 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue is related to an infinite loop that can occur with negated pcre and an indefinite recursion limit setting. Recommendations: At the moment, there is no information about ...

PT-2025-11967 · Suricata +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions affected versions not specified Description: The issue is related to high memory usage caused by the hashsize setting via rules in Suricata. Recommendations: At the moment, there is no information about a newer version that...

The vulnerability of the BPF filter in the Suricata intrusion detection and prevention system allows a intruder to trigger a service failure.

The vulnerability of the BPF filter in the Suricata intrusion detection and prevention system is related to the operation leaving the buffer boundaries into memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2024-70: Buffer Overflow in Suricata

The vulnerability was identified in Suricata versions 7.0.7 and below. Failure to check the input file size may result in a buffer overflow. Possible consequences of exploiting the vulnerability include an attacker gaining remote access to configuration files, injection a malicious BPF file into...

Fedora 41 : suricata (2024-b5da13e80a)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b5da13e80a advisory. Various security, performance, accuracy, and stability issues have been fixed. Tenable has extracted the preceding description block directly from the Fedora...

[SECURITY] Fedora 41 Update: suricata-7.0.7-1.fc41

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

[SECURITY] Fedora 40 Update: suricata-7.0.7-1.fc40

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

Fedora: Security Advisory (FEDORA-2024-8b08786765)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...