CVE-2024-23839

Summary

CVE-2024-23839 is a vulnerability affecting Suricata, an open-source network Intrusion Detection System and Security Monitoring engine. The issue lies in versions prior to 7.0.3, where specially crafted network traffic can induce a heap use-after-free bug. This occurs when rulesets utilize the http.request_header or http.response_header keywords. Successful exploitation can lead to unintended software behavior or even system crashes. To mitigate this issue, users should upgrade to Suricata version 7.0.3 or avoid employing the aforementioned keywords in their rulesets.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.