CVE-2024-23835: high-severity vulnerability in OISF suricata
Suricata's pgsql: memory exhaustion use on record parsing
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Suricata's PostgreSQL parser can consume excessive memory while analyzing network traffic, causing the system to crash. This happens when processing specially crafted PostgreSQL messages and affects security monitoring capabilities.
A resource exhaustion vulnerability (CWE-400, CWE-770) in Suricata's pgsql app layer parser allows unauthenticated attackers to trigger excessive memory allocation during record parsing via crafted network packets. The attack vector is network-based with no authentication required; successful exploitation leads to denial of service through out-of-memory conditions affecting the IDS/IPS engine.
In the same product, most dangerous first.