PT-2024-24751 · Suricata+2 · Suricata+2

Published 2024-05-07 · Updated 2025-07-28 · CVE-2024-32663

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.5 and 6.0.19

Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. A small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19.

Recommendations For Suricata versions prior to 7.0.5, update to version 7.0.5 to resolve the issue. For Suricata versions prior to 6.0.19, update to version 6.0.19 to resolve the issue. As a temporary workaround, consider disabling the HTTP/2 parser. Reduce the app-layer.protocols.http2.max-table-size value (default is 65536) to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

ALT-PU-2024-12896

CVE-2024-32663

DLA-4103-1

GHSA-9JXM-QW9V-266R

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 52

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32663.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-9jxm-qw9v-266r · Vendor Advisory
• https://github.com/OISF/suricata/commit/d24b37a103c04bb2667e449e080ba4c8e56bb019 · Patch
• https://github.com/OISF/suricata/commit/c0af92295e833d1db29b184d63cd3b829451d7fd · Patch
• https://github.com/OISF/suricata/commit/e68ec4b227d19498f364a41eb25d3182f0383ca5 · Patch
• https://github.com/OISF/suricata/commit/08d93f7c3762781b743f88f9fdc4389eb9c3eb64 · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-32663 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-32663 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32663 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-32663 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-32663 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-32663 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4103-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-32663 · Security Note