Medium severity5.3NVD Advisory· Published Feb 26, 2024· Updated Jun 17, 2026

CVE-2024-24568

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Oisf/Suricata3 versions
cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.3
- (no CPE)range: <7.0.3
- (no CPE)range: >= 7.0.0, < 7.0.3
Fedoraproject/Fedora2 versions
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Suricata/Suricatallm-fuzzy
Range: <7.0.3
osv-coords
pkg:rpm/opensuse/suricata&distro=openSUSE%20Tumbleweed
Range: < 8.0.0-1.1

Patches

Vulnerability mechanics

References

github.com/OISF/suricata/commit/478a2a38f54e2ae235f8486bff87d7d66b6307f0nvdPatch
github.com/OISF/suricata/security/advisories/GHSA-gv29-5hqw-5h8cnvdVendor Advisory
lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/nvdMailing List
lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/nvdMailing List
redmine.openinfosecfoundation.org/issues/6717nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000