PT-2024-32469 · Suricata+2 · Suricata+2

Juliana Fajardini Reichow · Published 2024-10-16 · Updated 2025-11-07 · CVE-2024-47188

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.7

Description The issue is related to the missing initialization of the random seed for thash, leading to predictable hash table behavior in byte-range tracking. This can cause severe performance degradation if an attacker forces a large amount of data into a single hash bucket. Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine.

Recommendations For versions prior to 7.0.7, update to version 7.0.7 to address the issue.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Use of Insufficiently Random Values

Weakness Enumeration

CWE-327

CWE-330

Related Identifiers

ALT-PU-2025-14099

CVE-2024-47188

GHSA-QQ5V-QCJX-F872

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 44

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47188.json · Exploit
• https://ubuntu.com/security/CVE-2024-47188 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-47188 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-47188 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-47188 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-47188 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-47188 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-47188 · Security Note
• https://github.com/OISF/suricata/security/advisories/GHSA-qq5v-qcjx-f872 · Note
• https://suse.com/security/cve/CVE-2024-47188 · Note
• https://suse.com/security/cve/CVE-2024-45797 · Note
• https://suse.com/security/cve/CVE-2024-47187 · Note
• https://twitter.com/VulmonFeeds/status/1846739363943555346 · Twitter Post
• https://suse.com/security/cve/CVE-2024-23839 · Note