CVE-2024-23836
- Source
- https://cve.org/CVERecord?id=CVE-2024-23836
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23836.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-23836
- Aliases
-
- GHSA-q33q-45cr-3cpc
- Downstream
- Related
- Published
- 2024-02-26T15:44:03.308Z
- Modified
- 2026-08-12T15:15:02.413377Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- crafted traffic can cause denial of service
- Details
-
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service. This vulnerability is patched in 6.0.16 or 7.0.3. Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the
stream.reassembly.depthvalue helps reduce the severity of the issue. - Database specific
{ "cwe_ids": [ "CWE-770" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json", "cna_assigner": "GitHub_M" }- References
-
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/
- https://redmine.openinfosecfoundation.org/issues/6531
- https://redmine.openinfosecfoundation.org/issues/6532
- https://redmine.openinfosecfoundation.org/issues/6540
- https://redmine.openinfosecfoundation.org/issues/6658
- https://redmine.openinfosecfoundation.org/issues/6659
- https://redmine.openinfosecfoundation.org/issues/6660
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json
- https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc
- https://nvd.nist.gov/vuln/detail/CVE-2024-23836
- https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7
- https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747
- https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7
- https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc
- https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97
- https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8
- https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786
- https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5
- https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01
- https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af
Affected packages
Git / github.com/oisf/suricata
Affected ranges
- Type
- GIT
- Repo
- https://github.com/oisf/suricata
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "fixed": "6.0.16" }, { "introduced": "7.0.0" }, { "fixed": "7.0.3" } ], "source": [ "CPE_RANGE", "REFERENCES" ] }
Affected versions
suricata-0.*
suricata-0.8.2
suricata-1.*
suricata-1.0.0
suricata-1.0.1
suricata-1.0.2
suricata-1.1
suricata-1.1beta1
suricata-1.1beta2
suricata-1.1beta3
suricata-1.1rc1
suricata-1.2
suricata-1.2.1
suricata-1.2beta1
suricata-1.2rc1
suricata-1.3
suricata-1.3.1
suricata-1.3beta1
suricata-1.3beta2
suricata-1.3rc1
suricata-1.4
suricata-1.4beta1
suricata-1.4beta2
suricata-1.4beta3
suricata-1.4rc1
suricata-2.*
suricata-2.0
suricata-2.0.1
suricata-2.0.1rc1
suricata-2.0.2
suricata-2.0beta1
suricata-2.0beta2
suricata-2.0rc1
suricata-2.0rc2
suricata-2.0rc3
suricata-2.1beta1
suricata-2.1beta2
suricata-2.1beta3
suricata-2.1beta4
suricata-3.*
suricata-3.0
suricata-3.0.1
suricata-3.0.1RC1
suricata-3.0RC1
suricata-3.0RC2
suricata-3.0RC3
suricata-3.1
suricata-3.1.1
suricata-3.1.2
suricata-3.1RC1
suricata-3.2
suricata-3.2.1
suricata-3.2RC1
suricata-3.2beta1
suricata-4.*
suricata-4.0.0
suricata-4.0.0-beta1
suricata-4.0.0-rc1
suricata-4.0.0-rc2
suricata-4.0.1
suricata-4.1.0
suricata-4.1.0-beta1
suricata-4.1.0-rc1
suricata-4.1.0-rc2
suricata-4.1.1
suricata-4.1.2
suricata-5.*
suricata-5.0.0
suricata-5.0.0-beta1
suricata-5.0.0-rc1
suricata-5.0.1
suricata-6.*
suricata-6.0.0
suricata-6.0.0-beta1
suricata-6.0.0-rc1
suricata-6.0.1
suricata-6.0.10
suricata-6.0.11
suricata-6.0.12
suricata-6.0.13
suricata-6.0.14
suricata-6.0.15
suricata-6.0.2
suricata-6.0.3
suricata-6.0.4
suricata-6.0.5
suricata-6.0.6
suricata-6.0.7
suricata-6.0.8
suricata-6.0.9
suricata-7.*
suricata-7.0.0
suricata-7.0.1
suricata-7.0.2
Database specific
vanir_signatures_modified
"2026-08-12T15:15:02Z"
vanir_signatures
[
{
"id": "CVE-2024-23836-01acb911",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"142965960444259777980657061985131953153",
"334089494406313947230449544387621260512",
"59302461598992136276812400541430404174",
"330827458261244608304424435599796251513"
]
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"file": "src/app-layer-htp.h"
}
},
{
"id": "CVE-2024-23836-090b6014",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 212.0,
"function_hash": "243892228198007358467473396691810736320"
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"function": "HTPStateGetTx",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-0f117573",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"137049373676718174382939566488712482303",
"151643537324946202333824767035916334300",
"236009724686673921688395788700012421525",
"174322552201852452877815088220683200805",
"265903176875314924689059777264702965442",
"138317786642350758453998198212282134267",
"52345714450084337919592551151320680589",
"53592312427592814529459801723424496825",
"271137533763551250403362007713755575640",
"200196121085283089393543218125493229360",
"239775717608517071228278313967951255442",
"103559075425107966315662743843910529673",
"181548146012205622745039073447705820580",
"271339392593565164430657629041727765891",
"244406995531428940365610245025065456808",
"126482496821901726938159346717084475448",
"133374585880698295692504999337723706010",
"135954345712668162126943166562530153365",
"162638859666865359111400240637486485653",
"231126592163839487962747090023145360984",
"255083707275259510914396490637449571848",
"101535884137540134904202785408205270773",
"96608217442015194370531440191200719057",
"112354383118539740281184955022226617829",
"323692320223321698219500502213113846954",
"44506996497357158743544518471363968856",
"237521536765811066142243557935715500105",
"103559075425107966315662743843910529673",
"181548146012205622745039073447705820580",
"271339392593565164430657629041727765891",
"244406995531428940365610245025065456808",
"221853900948107252894612101255164481602",
"174254827168122887612279310433911113004",
"333205812941909832341350545118556983481",
"72045713593165015724483807349611108600",
"187201613174374222245750421053931308975",
"323818083163146997948520466577529191604",
"235224638663192135784238079324904783736"
]
},
"source": "https://github.com/oisf/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786",
"target": {
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-149f3128",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 201.0,
"function_hash": "245155159312249163782230388372605484347"
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"function": "SMTPTransactionCreate",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-1806c35b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 571.0,
"function_hash": "158823291001613194088416643213041716029"
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"function": "HTPStateTransactionFree",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-21193d6c",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"137049373676718174382939566488712482303",
"151643537324946202333824767035916334300",
"22571442745458347264105703841534224531",
"9915768219515022595628378570240303343",
"108139769445448211961721579493136956763",
"223701580821989032212243343582910804992",
"156099373602176148386195554171497666717",
"20501147937046459696522264926284734386",
"151140315150343559444819253757858205482",
"242874922714239522436025547135450853658",
"249791162624582665150931301412318000897",
"92712815500775094644090099001635160094",
"225182362778810931507267119318436121123",
"338283251350412212059256062515379078560",
"324659228540535151829882801647465079326",
"77843563150502313691943007194824404552",
"321740120663255498665344308138480066592",
"103559075425107966315662743843910529673",
"181548146012205622745039073447705820580",
"271339392593565164430657629041727765891",
"244406995531428940365610245025065456808",
"186646859484571025083094100263017469798",
"8009437286865721878507160764917616288",
"120272771379210188897452231349733546013",
"88543400513126799830075384550939001998",
"96608217442015194370531440191200719057",
"112354383118539740281184955022226617829",
"323692320223321698219500502213113846954",
"44506996497357158743544518471363968856",
"237521536765811066142243557935715500105",
"103559075425107966315662743843910529673",
"181548146012205622745039073447705820580",
"271339392593565164430657629041727765891",
"244406995531428940365610245025065456808",
"221853900948107252894612101255164481602",
"174254827168122887612279310433911113004",
"333205812941909832341350545118556983481",
"72045713593165015724483807349611108600",
"187201613174374222245750421053931308975",
"323818083163146997948520466577529191604",
"235224638663192135784238079324904783736"
]
},
"source": "https://github.com/oisf/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7",
"target": {
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-25299f6b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 310.0,
"function_hash": "26180364270848667295417968039877165340"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HTPStateGetTxCnt",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-2d75a97a",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 350.0,
"function_hash": "309264542332198854519262324369081851448"
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"function": "SMTPTestInitConfig",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-3361368f",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 266.0,
"function_hash": "254063556785950435532704909935735581258"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HtpGetTxForH2",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-41a7957b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 266.0,
"function_hash": "254063556785950435532704909935735581258"
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"function": "HtpGetTxForH2",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-53fd9f24",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"10891644772758866330537517117764025017",
"180465324844771297749356363923557253795",
"5105344262610379499674715265656299153",
"232409278706822341342786315567319883087"
]
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"file": "src/app-layer-smtp.h"
}
},
{
"id": "CVE-2024-23836-54570897",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 1611.0,
"function_hash": "61383696148796309381203908828575058674"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HTPFileOpenWithRange",
"file": "src/app-layer-htp-file.c"
}
},
{
"id": "CVE-2024-23836-69889c56",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 2126.0,
"function_hash": "320877002617205553126724279874433499031"
},
"source": "https://github.com/oisf/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc",
"target": {
"function": "HTPConfigSetDefaultsPhase1",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-70a0ed56",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 350.0,
"function_hash": "309264542332198854519262324369081851448"
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"function": "SMTPTestInitConfig",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-744a00c7",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 2606.0,
"function_hash": "204248349273619338413394827909218114195"
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"function": "SMTPConfigure",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-78682ac8",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"299509311138843161022317290790441108696",
"311972976800963529997680457401956367121",
"266993071760787270538100770673583366530",
"84682579873549277713246004004961722056"
]
},
"source": "https://github.com/oisf/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc",
"target": {
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-799f065b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 781.0,
"function_hash": "24117344876752183218856800440311055335"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HTPStateFree",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-7dba96af",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"139945223516397017607421173607565172337",
"339132615478630641298901507823675235316",
"130382102345232862642389302716311083326",
"178336897550272958362052577814103448782",
"130783527017302505742529513689455428678",
"262581420254067569627651767268025074618",
"154130662891791189032688439354856208298",
"71034535686723760540381815184322249847",
"114208467314301834525759722786178279824",
"51516155183935135172680973897114972234",
"279882952370202367569293903365455051671",
"316554480187499989086617325239265991501",
"105319930071548432039452927939691832058",
"282601593264788219552511100400160516910",
"330270462857982730193206865513282537841",
"206846521749310547292432984507865993410",
"117874963655504996014069190961583426617",
"113491280092439552750717773283926048328",
"252830269144635906827145423808250699159",
"264029848119126896102517590302031018784",
"231562176627936475954471014387329790028",
"157192408021345393398928924759746232505",
"252830269144635906827145423808250699159",
"241928236759658868689811179614152949037",
"167409815977555962962048844741665833369",
"298466854824387276685267009896891988561",
"252830269144635906827145423808250699159",
"226269214460819851687256877054480288369",
"296883514284883801235209989597306114160",
"183011478701914802458150497234584320809"
]
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-857db284",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"141433290095762263785255434815291538180",
"34956949237258845524208330966218559552",
"134159909941918645855288432834476395667",
"71034535686723760540381815184322249847",
"114208467314301834525759722786178279824",
"51516155183935135172680973897114972234",
"279882952370202367569293903365455051671",
"316554480187499989086617325239265991501",
"105319930071548432039452927939691832058",
"282601593264788219552511100400160516910",
"330270462857982730193206865513282537841",
"253435108329354393010551112518853808207",
"80429257842489472296182883802547018245",
"175372089083673668070744619132333194740",
"252830269144635906827145423808250699159",
"183031937814784095795559968736203442063",
"102854599400086241616931669244503935675",
"329738223452946629065697232096701795008",
"252830269144635906827145423808250699159",
"241928236759658868689811179614152949037",
"167409815977555962962048844741665833369",
"298466854824387276685267009896891988561",
"252830269144635906827145423808250699159",
"226269214460819851687256877054480288369",
"296883514284883801235209989597306114160",
"183011478701914802458150497234584320809"
]
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-88557a62",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 12723.0,
"function_hash": "272277624454094244114715962605331889535"
},
"source": "https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01",
"target": {
"function": "HTPConfigParseParameters",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-8e34b379",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 4563.0,
"function_hash": "259810795710132886135223502318593422712"
},
"source": "https://github.com/oisf/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7",
"target": {
"function": "SMTPProcessRequest",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-93086fdc",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"240589125229066343246188374563545965611",
"98124072970306688102509533143343878331",
"42513232489016626179436472718860550470",
"252323537165201482361721471147467347134",
"86965694108221057006142273389633928464",
"143855230026898913828053400971181876271",
"236253174543934842372621151088059381514",
"185023427287647637911217727198933203609",
"304999915418286377752201603223790441707",
"33248083054525452875825132290514952960",
"159270159887354093691822027692135055763",
"255068300219709218216386645812516256803",
"249683987586465287739887723482022757963",
"15387000452187747277039147970393198191",
"14297880121792594207567382753865729956",
"156209593748271507731837150540412976712",
"32153688502152801836905363948647021754",
"206574163084185765810097016661747889129",
"296712387542131854993233003284501294593",
"168986740870092147437450018302422918518",
"254311039997283154284121231098502190837",
"255247455016159952654122021322466883228",
"23528910748069986506098611209682608866",
"314499620826626740581317792796617976894",
"131615163824617104197413902018885136272"
]
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-ab720a91",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 571.0,
"function_hash": "158823291001613194088416643213041716029"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HTPStateTransactionFree",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-c21d7b55",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"10891644772758866330537517117764025017",
"309873508900550072156893961179968545583",
"65884787851779765794152481915297061150",
"107802156131708482607519278004693370165"
]
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"file": "src/app-layer-smtp.h"
}
},
{
"id": "CVE-2024-23836-d40ad639",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 246.0,
"function_hash": "154224814782857314575260735793772502375"
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"function": "SMTPTransactionCreate",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-da2b57de",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 843.0,
"function_hash": "4523393365341125010076459311479126133"
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"function": "HTPStateFree",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-e1b5d5b0",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"299509311138843161022317290790441108696",
"311972976800963529997680457401956367121",
"266993071760787270538100770673583366530",
"84682579873549277713246004004961722056",
"337442609328826373024611146974701954908",
"314393082021152846806214160872789852994",
"24446057498206078990989096604959233841",
"182743217158196361948456174747146763685"
]
},
"source": "https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01",
"target": {
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-e305be2b",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 4277.0,
"function_hash": "55113618231482298865971097204781013735"
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"function": "SMTPProcessRequest",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-e573b8ef",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 3718.0,
"function_hash": "116518533822609553237543536939666416513"
},
"source": "https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af",
"target": {
"function": "SMTPConfigure",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-e7270574",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 2174.0,
"function_hash": "333552387008907864388900327890951773061"
},
"source": "https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01",
"target": {
"function": "HTPConfigSetDefaultsPhase1",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-e76efd1a",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"240589125229066343246188374563545965611",
"98124072970306688102509533143343878331",
"42513232489016626179436472718860550470",
"252323537165201482361721471147467347134",
"86965694108221057006142273389633928464",
"143855230026898913828053400971181876271",
"236253174543934842372621151088059381514",
"185023427287647637911217727198933203609",
"304999915418286377752201603223790441707",
"33248083054525452875825132290514952960",
"159270159887354093691822027692135055763",
"255068300219709218216386645812516256803",
"249683987586465287739887723482022757963",
"15387000452187747277039147970393198191",
"14297880121792594207567382753865729956",
"156209593748271507731837150540412976712",
"32153688502152801836905363948647021754",
"206574163084185765810097016661747889129",
"296712387542131854993233003284501294593",
"168986740870092147437450018302422918518",
"254311039997283154284121231098502190837",
"255247455016159952654122021322466883228",
"23528910748069986506098611209682608866",
"314499620826626740581317792796617976894",
"131615163824617104197413902018885136272"
]
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-e97c1e99",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"134539991125351701412488136581911443142",
"186841425515541566477027582447095310166",
"134541868353138801356369707921603960798",
"111417919650666129998244544387568578030"
]
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"file": "src/app-layer-htp-file.c"
}
},
{
"id": "CVE-2024-23836-eca94095",
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1",
"digest": {
"threshold": 0.9,
"line_hashes": [
"323511965521348221591460317987515668857",
"251343097821914443075390064079128047896",
"95304475395963602093700718739080709745",
"60873453182030635016553309957166000762"
]
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"file": "src/app-layer-htp.h"
}
},
{
"id": "CVE-2024-23836-eec81af7",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 212.0,
"function_hash": "243892228198007358467473396691810736320"
},
"source": "https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97",
"target": {
"function": "HTPStateGetTx",
"file": "src/app-layer-htp.c"
}
},
{
"id": "CVE-2024-23836-f2787150",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 4545.0,
"function_hash": "330369530905758532659799231646600929320"
},
"source": "https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747",
"target": {
"function": "SMTPProcessRequest",
"file": "src/app-layer-smtp.c"
}
},
{
"id": "CVE-2024-23836-f9442309",
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1",
"digest": {
"length": 310.0,
"function_hash": "26180364270848667295417968039877165340"
},
"source": "https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7",
"target": {
"function": "HTPStateGetTxCnt",
"file": "src/app-layer-htp.c"
}
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23836.json"