CVE-2024-55627: medium-severity vulnerability in OISF suricata
Suricata segfault on StreamingBufferSlideToOffsetWithRegions
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A specially crafted TCP stream can cause Suricata to crash due to a buffer overflow triggered by an integer underflow. This crash disrupts network security monitoring and intrusion detection capabilities.
An unsigned integer underflow in StreamingBufferSlideToOffsetWithRegions allows an attacker to craft a malicious TCP stream that causes a large memset operation to write beyond buffer boundaries. The vulnerability requires network access to send crafted packets; successful exploitation results in denial of service through segmentation fault, disabling intrusion detection/prevention functionality.
In the same product, most dangerous first.