CVE-2024-47187: Suricata datasets: missing hashtable random seed leads to potential DoS
First published: Wed Oct 16 2024(Updated: )
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use excessive time to load, as well as runtime performance issues during traffic handling. This issue has been addressed in 7.0.7. As a workaround, avoid loading datasets from untrusted sources. Avoid dataset rules that track traffic in rules.
Credit: security-advisories@github.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OISF Suricata | <7.0.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-47187?
CVE-2024-47187 has a moderate severity rating due to predictable hash table behavior that can impact data integrity.
How do I fix CVE-2024-47187?
To fix CVE-2024-47187, upgrade Suricata to version 7.0.7 or later, which resolves the issue of uninitialized random seed.
Who is affected by CVE-2024-47187?
CVE-2024-47187 affects versions of Suricata prior to 7.0.7.
What is the impact of CVE-2024-47187?
The impact of CVE-2024-47187 may include predictable hash table behavior, potentially leading to data exploitation.
Is CVE-2024-47187 a low-risk vulnerability?
No, CVE-2024-47187 is not considered low-risk due to its potential for impacting network security monitoring.
- agent/references
- agent/title
- agent/first-publish-date
- agent/description
- agent/type
- agent/severity
- agent/author
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/oisf
- canonical/oisf suricata