CVE-2024-23839

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-23839
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23839.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-23839
Aliases
  • GHSA-qxj6-hr2p-mmc7
Downstream
Related
Published
2024-02-26T15:48:16.120Z
Modified
2026-07-22T02:51:00.951214Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
Suricata http: heap use after free with http.request_header and http.response_header keywords
Details

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.requestheader or http.responseheader keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.requestheader and http.responseheader keywords.

Database specific 
{
    "cwe_ids": [
        "CWE-416"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23839.json"
}
References

Affected packages

Git / github.com/oisf/suricata

Affected ranges

Type
GIT
Repo
https://github.com/oisf/suricata
Events
Introduced
21ec99aa76cc5406007ce12a4891f2eaedb02291
Fixed
be68bbc4ab288ec84d2fe5e0737ace17ab74ef26
Fixed
cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f
Database specific 
{
    "cpe": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.0.0"
        },
        {
            "fixed": "7.0.3"
        }
    ],
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

suricata-7.*
suricata-7.0.0
suricata-7.0.1
suricata-7.0.2

Database specific

vanir_signatures_modified 
"2026-07-22T02:51:00Z"
vanir_signatures 
[
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1350.0,
            "function_hash": "23958017397562818409887912105497378055"
        },
        "signature_version": "v1",
        "source": "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "id": "CVE-2024-23839-4cd0b885",
        "target": {
            "function": "GetHttp1HeaderData",
            "file": "src/detect-http-header.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1234.0,
            "function_hash": "319589288217330573269303505180740422116"
        },
        "signature_version": "v1",
        "source": "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "id": "CVE-2024-23839-d44ca2f9",
        "target": {
            "function": "DetectHttpResponseHeaderRegister",
            "file": "src/detect-http-header.c"
        }
    },
    {
        "signature_type": "Function",
        "deprecated": false,
        "digest": {
            "length": 1216.0,
            "function_hash": "42680598968147550131556502817169503445"
        },
        "signature_version": "v1",
        "source": "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "id": "CVE-2024-23839-d61038bc",
        "target": {
            "function": "DetectHttpRequestHeaderRegister",
            "file": "src/detect-http-header.c"
        }
    },
    {
        "signature_type": "Line",
        "deprecated": false,
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "95854630627550112152669568347944395183",
                "123551874327214207405335637704689412725",
                "315429456141243864960096748431783237940",
                "233168686263502089879976329668258692255",
                "127374149780978768626865242823149074485",
                "228714731679697008511300139750879903622",
                "66302643253542945781597810037651131145",
                "91480801871289248178938369307048231566",
                "249202633849977393358262079364224706315",
                "189452672862140410757333540568673385660",
                "205767851414667831299433431414090659621",
                "244897086929176758784533191013235390417",
                "28300696445405970269920056881685453992",
                "185471832444854767940291488660770932458",
                "314372135556690044813822808863046061697",
                "109353331319757449432311399688088795011",
                "168754156993292387045637196334681321614",
                "133090254437221512568596444953619001936",
                "198755386643640366460099811065080794811",
                "146962589220571506081188436976583712254",
                "288443776959337827942934402748200325387",
                "218605863989959861389237740577066319011",
                "234248151683660641923813293917942221764",
                "168139019393821768284562142745987572697",
                "23482439456264419999872166907561363471",
                "49813932668150950602730911434461467008",
                "177915162109008082793315930404243102753",
                "303010253074177993257882775512134065906",
                "16458480318637906673775034802540897809",
                "59098138864530900488918522131243760757",
                "308205055488187799903171995075039270796",
                "258075747848144534069032414026095731137",
                "173146032092714621008721104672764116051",
                "78084760805515496722001057687959656982",
                "59993150915758896830698473006214392480",
                "26231708794938661823406591003899393644",
                "4943373885433910067791838252072363209",
                "204577279005492945345530641259717891243",
                "270249798546725190670392716529270944600",
                "107866347090419913964280034149860738271",
                "167212428767209261478100443856474875189",
                "173143266095716895208030431958190447131",
                "331286533550946905219545239773349536754",
                "290753091417118425046562170176166278209",
                "308747481007737751576494794751284564010",
                "296209098343051157680051581399990711405",
                "316349834651361852094970421490805725458",
                "33723132219050451917312241691080017992",
                "224407674496042021721224534108379961690",
                "118267918114822580653994923696578645756",
                "93820071963560364003456818956234904396",
                "332475307847122866001013153909402191752",
                "297092758945185865280482896833499501637",
                "128662137044466857667143330695416587593"
            ]
        },
        "signature_version": "v1",
        "source": "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "id": "CVE-2024-23839-eb08a769",
        "target": {
            "file": "src/detect-http-header.c"
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23839.json"