CVE-2024-47188: Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to byte-range tracking having predictable hash table behavior. This can lead to an attacker forcing lots of data into a single hash bucket, leading to severe performance degradation. This issue has been addressed in 7.0.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47188?
The severity of CVE-2024-47188 is considered high due to predictable hash table behavior that could be exploited for tracking within the affected software.
How do I fix CVE-2024-47188?
To fix CVE-2024-47188, upgrade Suricata to version 7.0.7 or later where the vulnerability has been addressed.
What systems are affected by CVE-2024-47188?
CVE-2024-47188 affects all versions of Suricata prior to 7.0.7.
What type of vulnerability is CVE-2024-47188?
CVE-2024-47188 is categorized as a flaw due to missing initialization of the random seed, leading to predictable outcomes.
Can CVE-2024-47188 lead to data exposure?
Yes, CVE-2024-47188 could potentially allow attackers to exploit the predictable hash table behavior for data exposure through tracking.