PT-2024-7006 · Suricata+2 · Suricata+2

Published 2024-09-23 · Updated 2025-11-07 · CVE-2024-47522

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.7

Description The issue is related to errors in checking the JA4 identifier, which provides information about the application protocol to be used between the client and server. Exploitation of this issue can allow a remote attacker to cause a denial of service by sending specially crafted TLS/QUIC traffic. The problem is associated with the operation of the ja4 fingerprinting engine.

Recommendations For versions prior to 7.0.7, update to version 7.0.7 to resolve the issue. As a temporary workaround, consider disabling ja4 by setting app-layer.protocols.tls.ja3,4-fingerprints to no in the suricata.yaml configuration file.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

ALT-PU-2025-14099

BDU:2024-08255

CVE-2024-47522

GHSA-W5XV-6586-JPM7

OPENSUSE-SU-2025:15394-1

Affected Products

Alt Linux

Debian

Suricata

References · 49

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47522.json · Exploit
• https://redmine.openinfosecfoundation.org/issues/7267 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-47522 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15394-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-47522 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-08255 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-47522 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47522 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2024-47522 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2024-47522 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-47522 · Vendor Advisory
• https://github.com/OISF/suricata/security/advisories/GHSA-w5xv-6586-jpm7 · Note
• https://suse.com/security/cve/CVE-2024-47188 · Note
• https://suse.com/security/cve/CVE-2024-45797 · Note
• https://suse.com/security/cve/CVE-2024-47187 · Note