CVE-2024-37151

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable defrag to reduce the scope of the problem.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS Score

Exploitation Probability

0.491

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2024-37151,CVE-2024-38535 are affected in suricata 6.0.19	Windows
Vulnerabilities CVE-2024-37151,CVE-2024-38534,CVE-2024-38535,CVE-2024-38536 are affected in suricata 7.0.5	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234