CVE-2024-23836: high-severity vulnerability in OISF suricata
crafted traffic can cause denial of service
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
An attacker can send specially crafted network traffic that forces Suricata (a security monitoring tool) to use excessive CPU and memory, causing it to slow down or stop working entirely.
Suricata versions before 6.0.16 and 7.0.3 are vulnerable to a denial-of-service attack via crafted traffic that triggers inefficient resource consumption in protocol parsing and stream reassembly; exploitation requires only the ability to send network traffic to the monitored interface, resulting in system unavailability or severe performance degradation.
In the same product, most dangerous first.