Suricata http: heap use after free with http.request_header and http.response_header keywords
Résumé
Suricata http: heap use after free with http.request_header and http.response_header keywords
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.request_header and http.response_header keywords.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-23839 suricata Corrigé dans: 1:7.0.3-1
- Ubuntu UBUNTU-CVE-2024-23839 suricata
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web redmine.openinfosecfoundation.org