CVE-2024-23836

    Dashboard / Vulnerabilities / CVE-2024-23836

    CVE-2024-23836

    Published: 26 Feb 2024Last Modified: 12 Aug 2026

    Summary: crafted traffic can cause denial of service

    Details: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.

    References: https://lists.fedoraproject.org/archives/list/[email protected]/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/, https://lists.fedoraproject.org/archives/list/[email protected]/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/, https://redmine.openinfosecfoundation.org/issues/6531, https://redmine.openinfosecfoundation.org/issues/6532, https://redmine.openinfosecfoundation.org/issues/6540, https://redmine.openinfosecfoundation.org/issues/6658, https://redmine.openinfosecfoundation.org/issues/6659, https://redmine.openinfosecfoundation.org/issues/6660, https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json, https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc, https://nvd.nist.gov/vuln/detail/CVE-2024-23836, https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7, https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747, https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7, https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc, https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97, https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8, https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786, https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5, https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01, https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -b46ffaaf430faa0a5a46915e223a49f06847b523

    Affected versions

    suricata-6.0.15
    suricata-6.0.14
    suricata-6.0.13
    suricata-6.0.12
    suricata-6.0.11
    suricata-6.0.10
    suricata-6.0.9
    suricata-6.0.8
    suricata-6.0.7
    suricata-6.0.6
    suricata-6.0.5
    suricata-6.0.4
    suricata-6.0.3
    suricata-6.0.2
    suricata-6.0.1
    suricata-6.0.0
    suricata-6.0.0-rc1
    suricata-6.0.0-beta1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2024-23836 | CVE-DB