OISF Suricata up to 7.0.6 assertion

Summaryinfo

A vulnerability was found in OISF Suricata up to 7.0.6. It has been classified as critical. This issue affects some unknown processing. The manipulation leads to assertion. This vulnerability is documented as CVE-2024-45795. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability was found in OISF Suricata up to 7.0.6. It has been rated as critical. This issue affects an unknown code block. The manipulation with an unknown input leads to a assertion vulnerability. Using CWE to declare the problem leads to CWE-617. The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary. Impacted is availability. The summary by CVE is:

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service. This issue is addressed in 7.0.7. As a workaround, use only trusted and well tested rulesets.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2024-45795 since 09/09/2024. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 214273 (Suricata < 7.0.7 Multiple Vulnerabilities), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 7.0.7 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (214273). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• OISF

Name

• Suricata

Version

• 7.0.0
• 7.0.1
• 7.0.2
• 7.0.3
• 7.0.4
• 7.0.5
• 7.0.6

License

• open-source

Website

• Product: https://github.com/OISF/suricata/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion