VULNERABILITY INTELLIGENCE
CVE-2024-24568
CVSS score5.3 MEDIUM
EPSS probability0.64%
CISA KEVNot currently listed
Published2024-02-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- security-advisories@github.com — Patch
- security-advisories@github.com — Vendor Advisory
- security-advisories@github.com — Mailing List
- security-advisories@github.com — Mailing List
- security-advisories@github.com — Issue Tracking
- af854a3a-2127-422b-91ae-364da2661108 — Patch
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking