CVE-2024-32664: Suricata's base64 contains an out of bounds write
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with base64decode keyword with bytes option with value 1, 2 or 5 and for 7.0.x, setting app-layer.protocols.smtp.mime.body-md5 to false.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32664?
CVE-2024-32664 is classified as a limited buffer overflow vulnerability affecting Suricata versions prior to 6.0.19 and 7.0.5.
How do I fix CVE-2024-32664?
To fix CVE-2024-32664, upgrade Suricata to version 6.0.19 or 7.0.5 or later.
What versions of Suricata are affected by CVE-2024-32664?
CVE-2024-32664 affects Suricata versions 6.0.0 to 6.0.18 and 7.0.0 to 7.0.4.
What types of attacks can exploit CVE-2024-32664?
CVE-2024-32664 can be exploited through specially crafted traffic or datasets that trigger the buffer overflow.
Are there any workarounds for CVE-2024-32664?
Temporary workarounds for CVE-2024-32664 involve restrictions on the type of traffic processed by Suricata before the software is updated.