PT-2024-1592 · Suricata+1 · Suricata+1

Published 2024-02-08 · Updated 2025-07-28 · CVE-2024-23836

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 6.0.16 and 7.0.3

Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. An attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.

Recommendations To resolve the issue for versions prior to 6.0.16, update to version 6.0.16 or later. To resolve the issue for versions prior to 7.0.3, update to version 7.0.3 or later. As a temporary workaround, consider disabling the affected protocol app-layer parser in the yaml. Reduce the stream.reassembly.depth value to help reduce the severity of the issue.

Exploit

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

CWE-1395

Related Identifiers

BDU:2024-01182

CVE-2024-23836

GHSA-Q33Q-45CR-3CPC

OPENSUSE-SU-2025:15394-1

Affected Products

Debian

Suricata

References · 68

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc · Vendor Advisory
• https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01 · Patch
• https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7 · Patch
• https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8 · Patch
• https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5 · Patch
• https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc · Patch
• https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747 · Patch
• https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786 · Patch
• https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af · Patch
• https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7 · Patch
• https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97 · Patch
• https://ubuntu.com/security/CVE-2024-23836 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4 · Vendor Advisory