PT-2024-24922 · Suricata+2 · Suricata+2

Lucas Aubard · Published 2024-05-07 · Updated 2025-09-26 · CVE-2024-32867

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.5 Suricata versions prior to 6.0.19

Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. Various problems in handling fragmentation anomalies can lead to mis-detection of rules and policy.

Recommendations For versions prior to 7.0.5, update to version 7.0.5 or later. For versions prior to 6.0.19, update to version 6.0.19 or later.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALT-PU-2024-12896

CVE-2024-32867

GHSA-XVRX-88MV-XCQ5

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 54

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32867.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5 · Vendor Advisory
• https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8 · Patch
• https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9 · Patch
• https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634 · Patch
• https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b · Patch
• https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9 · Patch
• https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66 · Patch
• https://cve.org/CVERecord?id=CVE-2024-32867 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-32867 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-32867 · Security Note
• https://osv.dev/vulnerability/CVE-2024-32867 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-32867 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-32867 · Vendor Advisory