CVE Feed

    Dashboard / CVE / CVE-2024-32867

    CVE-2024-32867

    Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

    Published:May 7, 2024
    Last Modified:Dec 19, 2024
    EPS:May 7, 2024
    EPSS Score:0.00847
    CVSS Score:5.3

    Affected Products

    Vendor
    Oisf
    Product
    Suricata

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-45770 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45769 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45768 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45767 (CVSS 4.4) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45766 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45765 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45764 (CVSS 9.1) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45762 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45761 (CVSS 3.3) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …
    CVE-2026-45759 (CVSS 7.5) — Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring …

    References

    https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
    https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
    https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
    https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
    https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
    https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
    https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
    https://redmine.openinfosecfoundation.org/issues/6672
    https://redmine.openinfosecfoundation.org/issues/6673
    https://redmine.openinfosecfoundation.org/issues/6677
    https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
    https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
    https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
    https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
    https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
    https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
    https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
    https://redmine.openinfosecfoundation.org/issues/6672
    https://redmine.openinfosecfoundation.org/issues/6673
    https://redmine.openinfosecfoundation.org/issues/6677

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High