CVE-2024-24568

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-24568
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-24568.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-24568
Aliases
  • GHSA-gv29-5hqw-5h8c
Downstream
Published
2024-02-26T15:54:52Z
Modified
2025-10-22T18:40:04.934722Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
Summary
Suricata http2: header handling evasion
Details

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.

Database specific 
{
    "cwe_ids": [
        "CWE-284"
    ]
}
References

Affected packages

Git / github.com/oisf/suricata

Affected ranges

Type
GIT
Repo
https://github.com/oisf/suricata
Events
Introduced
21ec99aa76cc5406007ce12a4891f2eaedb02291
Fixed
be68bbc4ab288ec84d2fe5e0737ace17ab74ef26

Affected versions

suricata-7.*

suricata-7.0.0
suricata-7.0.1
suricata-7.0.2