Executive Summary

Informations
Name CVE-2024-32867 First vendor Publication 2024-05-07
Vendor Cve Last vendor Modification 2024-12-19

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Overall CVSS Score 5.3
Base Score 5.3 Environmental Score 5.3
impact SubScore 1.4 Temporal Score 5.3
Exploitabality Sub Score 3.9
 
Attack Vector Network Attack Complexity Low
Privileges Required None User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact Low Availability Impact None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32867

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-754 Improper Check for Unusual or Exceptional Conditions

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 27

Sources (Detail)

https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9
https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66
https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634
https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b
https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9
https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8
https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5
https://redmine.openinfosecfoundation.org/issues/6672
https://redmine.openinfosecfoundation.org/issues/6673
https://redmine.openinfosecfoundation.org/issues/6677
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
Date Informations
2024-12-20 00:20:53
  • Multiple Updates
2024-11-25 09:25:42
  • Multiple Updates
2024-05-08 00:27:27
  • Multiple Updates
2024-05-07 21:27:28
  • First insertion