CVE-2024-37151CWE-754

Suricata defrag: IP ID reuse can lead to policy bypass

Medium · published July 11, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.

Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00621 · 49.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2024-07-11T14:39Z
EPSS history
Timeline
  • 11 JUL 14:39Z
    Suricata defrag: IP ID reuse can lead to policy bypass
    cvelistv5