CVE-2024-37151

low-risk
Published 2024-07-11

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.

Do I need to act?

-
0.49% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10 Medium
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Oisf

References (11)

Patch https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0
Patch https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b
Vendor Advisory https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24
Issue Tracking https://redmine.openinfosecfoundation.org/issues/7041
Issue Tracking https://redmine.openinfosecfoundation.org/issues/7042
Patch https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0
Patch https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b
Vendor Advisory https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24
https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html
Issue Tracking https://redmine.openinfosecfoundation.org/issues/7041
Issue Tracking https://redmine.openinfosecfoundation.org/issues/7042
28
/ 100
low-risk
Severity 21/34 · High
Exploitability 2/34 · Minimal
Exposure 5/34 · Minimal