Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
Résumé
Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, a small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19. Workarounds include disabling the HTTP/2 parser and reducing app-layer.protocols.http2.max-table-size value (default is 65536).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-32663 suricata Corrigé dans: 1:6.0.1-3+deb11u1
- Ubuntu UBUNTU-CVE-2024-32663 suricata
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- patch github.com
- patch github.com
- web lists.debian.org
- web redmine.openinfosecfoundation.org
- web redmine.openinfosecfoundation.org