VYPR
← All advisories
High severity7.5NVD Advisory· Published Feb 26, 2024· Updated Jun 17, 2026

CVE-2024-23836

CVE-2024-23836

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the stream.reassembly.depth value helps reduce the severity of the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Oisf/Suricata3 versions
    cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*range: <6.0.16
    • (no CPE)range: <6.0.16, <7.0.3
    • (no CPE)range: < 6.0.16
  • Fedoraproject/Fedora2 versions
    cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
    • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  • osv-coords
    pkg:rpm/opensuse/suricata&distro=openSUSE%20Tumbleweed
    Range: < 8.0.0-1.1

Patches

Vulnerability mechanics

References

19

News mentions

0

No linked articles in our index yet.