CVE-2024-24568: Suricata http2: header handling evasion
First published: Mon Feb 26 2024(Updated: )
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Suricata | >=7.0.0<7.0.3 | |
| Fedora | =38 | |
| Fedora | =39 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/OISF/suricata/security/advisories/GHSA-gv29-5hqw-5h8c
- https://github.com/OISF/suricata/commit/478a2a38f54e2ae235f8486bff87d7d66b6307f0
- https://redmine.openinfosecfoundation.org/issues/6717
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/
Frequently Asked Questions
What is the severity of CVE-2024-24568?
CVE-2024-24568 is considered a medium severity vulnerability due to the potential bypass of critical HTTP2 header inspection rules.
How do I fix CVE-2024-24568?
To fix CVE-2024-24568, upgrade Suricata to version 7.0.3 or later.
Which versions of Suricata are affected by CVE-2024-24568?
CVE-2024-24568 affects all versions of Suricata prior to 7.0.3.
What is the impact of CVE-2024-24568?
The impact of CVE-2024-24568 is that crafted traffic can bypass rules that inspect HTTP2 headers, potentially leading to security breaches.
Are there any workarounds for CVE-2024-24568?
Currently, there are no known workarounds for CVE-2024-24568 other than upgrading to the patched version.
- agent/weakness
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/author
- agent/event
- agent/references
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/remedy
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oisf
- canonical/suricata
- version/suricata/7.0.0
- vendor/fedoraproject
- canonical/fedora
- version/fedora/38
- version/fedora/39