CVE-2024-32867

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

Affected products

Alt Linux, Debian, Suricata

Oisf Suricata

< 6.0.19, 7.0.5

Fix

Available

CVSS 3.1

5.3 MEDIUM

EPSS

0.7% (50th percentile)

Weakness

CWE-754

NVD status

Analyzed

Published

2024-05-07

No exploit for CVE-2024-32867 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.