PT-2024-10010 · Suricata+2 · Suricata+2

Molenzwiebel + 2 · Published 2024-12-12 · Updated 2025-11-07 · CVE-2024-55629

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.8

Description The issue is related to Suricata's handling of TCP urgent data, which can lead to possible evasions due to differences in data analysis between Suricata and the applications at the TCP endpoints. This can potentially allow a remote attacker to impact the integrity of protected information. Suricata 7.0.8 includes options to configure how to handle TCP urgent data, mitigating the risk.

Recommendations For versions prior to 7.0.8, consider updating to Suricata 7.0.8 to mitigate the risk. In IPS mode, use a rule such as "drop tcp any any -> any any (sid:1; tcp.flags:U*;)" to drop all packets with the urgent flag set, as a temporary workaround until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-436

CWE-437

Related Identifiers

ALT-PU-2025-14099

BDU:2025-00137

CVE-2024-55629

GHSA-69WR-VHWG-84H2

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55629.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-69wr-vhwg-84h2 · Vendor Advisory
• https://github.com/OISF/suricata/commit/779f9d8ba35c3f9b5abfa327d3a4209861bd2eb8 · Patch
• https://github.com/OISF/suricata/commit/6882bcb3e51bd3cf509fb6569cc30f48d7bb53d7 · Patch
• https://ubuntu.com/security/CVE-2024-55629 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-55629 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00137 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-55629 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-55629 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-55629 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-55629 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-55629 · Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2j · Note
• https://suse.com/security/cve/CVE-2024-47188 · Note