CVE-2024-32663: Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19. Workarounds include disabling the HTTP/2 parser and reducing app-layer.protocols.http2.max-table-size value (default is 65536).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32663?
CVE-2024-32663 has been classified as a moderate severity vulnerability due to its ability to cause excessive memory usage.
How do I fix CVE-2024-32663?
To mitigate CVE-2024-32663, upgrade to Suricata version 7.0.5 or 6.0.19 or later.
What versions of Suricata are affected by CVE-2024-32663?
CVE-2024-32663 affects Suricata versions prior to 7.0.5 and 6.0.19.
What type of vulnerability is CVE-2024-32663?
CVE-2024-32663 is a memory exhaustion vulnerability that can be triggered by specific HTTP/2 traffic.
Is CVE-2024-32663 specific to certain operating systems?
CVE-2024-32663 is not specific to any operating system but affects any system running the vulnerable versions of Suricata.