CVE-2024-28870: Suricata uses excessive resource use in malformed ssh traffic parsing

First published: Wed Apr 03 2024(Updated: )

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in alert records. This issue has been patched in versions 6.0.17 and 7.0.4.

Credit: security-advisories@github.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/title
• agent/weakness
• agent/references
• agent/first-publish-date
• agent/description
• agent/type
• collector/epss-latest
• source/FIRST
• agent/epss
• collector/nvd-api
• source/NVD
• agent/severity
• agent/last-modified-date
• agent/author
• agent/tags
• agent/event