CVE-2024-45796: Suricata defrag: off by one can lead to policy bypass
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45796?
CVE-2024-45796 is classified as a medium severity vulnerability due to the potential for failed packet reassembly leading to exploitation.
How do I fix CVE-2024-45796?
To fix CVE-2024-45796, upgrade Suricata to version 7.0.7 or later.
What impact does CVE-2024-45796 have on network security?
CVE-2024-45796 can disrupt the integrity of network traffic analysis, allowing attackers to exploit valid traffic reassembly failures.
Which versions of Suricata are affected by CVE-2024-45796?
CVE-2024-45796 affects all versions of Suricata prior to 7.0.7.
Can CVE-2024-45796 be exploited remotely?
Yes, CVE-2024-45796 can potentially be exploited remotely by an attacker crafting specific packets.