Suricata http: heap use after free with http.request_header and http.response_header keywords
Summary
Suricata http: heap use after free with http.request_header and http.response_header keywords
Original description
The description as published by the source.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.request_header and http.response_header keywords.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-23839 suricata Fixed in: 1:7.0.3-1
- Ubuntu UBUNTU-CVE-2024-23839 suricata
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web redmine.openinfosecfoundation.org