Unrated severityNVD Advisory· Published Jul 11, 2024· Updated Aug 2, 2024
Suricata http2: oom from duplicate headers
CVE-2024-38535
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Suricata can run out of memory when parsing crafted HTTP/2 traffic. Upgrade to 6.0.20 or 7.0.6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
6- github.com/OISF/suricata/commit/62d5cac1b8483d5f9d2b79833a4e59f5d80129b7mitrex_refsource_MISC
- github.com/OISF/suricata/commit/c82fa5ca0d1ce0bd8f936e0b860707a6571373b2mitrex_refsource_MISC
- github.com/OISF/suricata/security/advisories/GHSA-cg8j-7mwm-v563mitrex_refsource_CONFIRM
- redmine.openinfosecfoundation.org/issues/7104mitrex_refsource_MISC
- redmine.openinfosecfoundation.org/issues/7105mitrex_refsource_MISC
- redmine.openinfosecfoundation.org/issues/7112mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.