CVE-2024-55627: Suricata segfault on StreamingBufferSlideToOffsetWithRegions
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow. The issue has been addressed in Suricata 7.0.8.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-55627?
CVE-2024-55627 has a severity rating that indicates it may allow a buffer overflow, potentially leading to system crashes or unauthorized access.
How do I fix CVE-2024-55627?
To fix CVE-2024-55627, upgrade Suricata to version 7.0.8 or later, where this vulnerability has been addressed.
What are the potential impacts of CVE-2024-55627?
The potential impacts of CVE-2024-55627 include system instability and possible remote code execution due to the buffer overflow.
Is my version of Suricata affected by CVE-2024-55627?
If you are using a version of Suricata prior to 7.0.8, your installation is affected by CVE-2024-55627.
What causes CVE-2024-55627?
CVE-2024-55627 is caused by a specially crafted TCP stream that leads to a large buffer overflow during initialization.