PT-2024-4845 · Suricata+2 · Suricata+2
Victor Julien
·
Published
2024-05-16
·
Updated
2025-11-07
·
CVE-2024-38536
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
Suricata versions prior to 7.0.6
Description:
A memory allocation failure due to
http.memcap being reached leads to a NULL-ptr reference, resulting in a crash. This issue can be exploited by a remote attacker to cause a denial of service.Recommendations:
For versions prior to 7.0.6, upgrade to 7.0.6 to resolve the issue. As a temporary workaround, consider adjusting the
http.memcap setting to prevent the memory allocation failure until a patch is applied. Restrict access to the Suricata engine to minimize the risk of exploitation.Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Debian
Suricata