CVE-2024-37151
Suricata defrag: IP ID reuse can lead to policy bypass
概要
Suricata defrag: IP ID reuse can lead to policy bypass
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.
Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable defrag to reduce the scope of the problem.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2024-37151 suricata 修正版: 1:6.0.1-3+deb11u1
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com
- web lists.debian.org
- web redmine.openinfosecfoundation.org
- web redmine.openinfosecfoundation.org