Wind River Support Network

HomeDefectsLIN1019-10926
Not to be fixed

LIN1019-10926 : Security Advisory - suricata - CVE-2024-23839

Created: Feb 8, 2024    Updated: Feb 29, 2024
Resolved Date: Feb 29, 2024
Found In Version: 10.19.45.1
Severity: Standard
Applicable for: Wind River Linux LTS 19
Component/s: Userspace

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.  Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword.  The vulnerability has been patched in 7.0.3.  To work around the vulnerability, avoid the http.request_header and http.response_header keywords.

https://nvd.nist.gov/vuln/detail/CVE-2024-23839
Live chat
Online