What is the severity of CVE-2024-47188?

The severity of CVE-2024-47188 is considered high due to predictable hash table behavior that could be exploited for tracking within the affected software.

How do I fix CVE-2024-47188?

To fix CVE-2024-47188, upgrade Suricata to version 7.0.7 or later where the vulnerability has been addressed.

What systems are affected by CVE-2024-47188?

CVE-2024-47188 affects all versions of Suricata prior to 7.0.7.

What type of vulnerability is CVE-2024-47188?

CVE-2024-47188 is categorized as a flaw due to missing initialization of the random seed, leading to predictable outcomes.

Can CVE-2024-47188 lead to data exposure?

Yes, CVE-2024-47188 could potentially allow attackers to exploit the predictable hash table behavior for data exposure through tracking.

Vulnerability/
CVE-2024-47188

high

7.5

CWE

330 327

16/10/2024

22/10/2024

CVE-2024-47188: Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS

First published: Wed Oct 16 2024(Updated: )

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker forcing lots of data into a single hash bucket, leading to severe performance degradation. This issue has been addressed in 7.0.7.

Credit: security-advisories@github.com

Affected Software	Affected Version	How to fix
OISF Suricata	<7.0.7

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-47188?
The severity of CVE-2024-47188 is considered high due to predictable hash table behavior that could be exploited for tracking within the affected software.
How do I fix CVE-2024-47188?
To fix CVE-2024-47188, upgrade Suricata to version 7.0.7 or later where the vulnerability has been addressed.
What systems are affected by CVE-2024-47188?
CVE-2024-47188 affects all versions of Suricata prior to 7.0.7.
What type of vulnerability is CVE-2024-47188?
CVE-2024-47188 is categorized as a flaw due to missing initialization of the random seed, leading to predictable outcomes.
Can CVE-2024-47188 lead to data exposure?
Yes, CVE-2024-47188 could potentially allow attackers to exploit the predictable hash table behavior for data exposure through tracking.

agent/references
agent/title
agent/type
agent/first-publish-date
agent/description
agent/severity
agent/author
agent/event
collector/mitre-cve
source/MITRE
agent/weakness
agent/last-modified-date
agent/source
agent/tags
agent/softwarecombine
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/oisf
canonical/oisf suricata

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.