CVE-2024-24568
Fixed in a distro release EPSS <1%CVSS 5.3
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.
Products: OISF suricata, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | suricata | 1:7.0.3-1 |
| Debian 14 | suricata | 1:7.0.3-1 |
| Ubuntu 16.04 LTS | suricata | no fix |
| Ubuntu 18.04 LTS | suricata | no fix |
| Ubuntu 22.04 LTS | suricata | no fix |
| Ubuntu 24.04 LTS | suricata | no fix |
| Ubuntu 25.10 | suricata | no fix |
| Ubuntu 26.04 LTS | suricata | no fix |
| Ubuntu 26.10 | suricata | no fix |
| openSUSE Tumbleweed | suricata | 8.0.0-1.1 |