CVE-2024-45796CWE-193

Suricata defrag: off by one can lead to policy bypass

Medium · published October 16, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00465 · 39.3th percentile
Weakness
CWE-193 · Off-by-one Error
Published
2024-10-16T18:41Z
EPSS history
Timeline
  • 16 OCT 18:41Z
    Suricata defrag: off by one can lead to policy bypass
    cvelistv5