PT-2024-27336 · Suricata+2 · Suricata+2

Léopold Ouairy + 2 · Published 2024-07-11 · Updated 2025-11-07 · CVE-2024-37151

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 6.0.20 Suricata versions prior to 7.0.6

Description Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass.

Recommendations Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable defrag to reduce the scope of the problem.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALT-PU-2025-14099

CVE-2024-37151

DLA-4103-1

GHSA-QRP7-G66M-PX24

MGASA-2024-0306

OPENSUSE-SU-2025:15394-1

ROSA-SA-2025-2578

Affected Products

Alt Linux

Debian

Suricata

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/37xxx/CVE-2024-37151.json · Exploit
• https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24 · Vendor Advisory
• https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0 · Patch
• https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b · Patch
• https://osv.dev/vulnerability/CVE-2024-37151 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-37151 · Security Note
• https://ubuntu.com/security/CVE-2024-37151 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-37151 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/JJWELU75TPOICUA2UGNZDY7QQJBB7HYJ · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-37151 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-37151 · Security Note
• https://advisories.mageia.org/MGASA-2024-0306.html · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-37151 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4103-1 · Vendor Advisory