CVE-2024-38536

2024-07-1100:00:00

ubuntu.com

suricata

network security

memory allocation

http.memcap

crash

upgrade

7.0.6

unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

Low

JSON

Suricata is a network Intrusion Detection System, Intrusion Prevention
System and Network Security Monitoring engine. A memory allocation failure
due to http.memcap being reached leads to a NULL-ptr reference leading to
a crash. Upgrade to 7.0.6.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchsuricata< anyUNKNOWN
ubuntu22.04noarchsuricata< anyUNKNOWN
ubuntu24.04noarchsuricata< anyUNKNOWN
ubuntu16.04noarchsuricata< anyUNKNOWN