CVE-2024-23839
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-23839 is a vulnerability affecting Suricata, an open-source network Intrusion Detection System and Security Monitoring engine. The issue lies in versions prior to 7.0.3, where specially crafted network traffic can induce a heap use-after-free bug. This occurs when rulesets utilize the http.request_header or http.response_header keywords. Successful exploitation can lead to unintended software behavior or even system crashes. To mitigate this issue, users should upgrade to Suricata version 7.0.3 or avoid employing the aforementioned keywords in their rulesets.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions