CVE-2024-23839

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-23839
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-23839.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-23839
Aliases
  • GHSA-qxj6-hr2p-mmc7
Downstream
Related
Published
2024-02-26T15:48:16Z
Modified
2026-08-18T17:26:36Z
Severity
  • 7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H CVSS Calculator
Summary
Suricata http: heap use after free with http.request_header and http.response_header keywords
Details

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.request_header or http.response_header keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.request_header and http.response_header keywords.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-416"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23839.json"
}
References

Affected packages

Git / github.com/oisf/suricata

Affected ranges

Type
GIT
Repo
https://github.com/oisf/suricata
Events
Introduced
21ec99aa76cc5406007ce12a4891f2eaedb02291
Fixed
be68bbc4ab288ec84d2fe5e0737ace17ab74ef26
Fixed
cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "7.0.0"
        },
        {
            "fixed":  "7.0.3"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

suricata-7.*
suricata-7.0.0
suricata-7.0.1
suricata-7.0.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-23839.json"
vanir_signatures 
[
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "23958017397562818409887912105497378055",
            "length":  1350
        },
        "id":  "CVE-2024-23839-4cd0b885",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "target":  {
            "file":  "src/detect-http-header.c",
            "function":  "GetHttp1HeaderData"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "319589288217330573269303505180740422116",
            "length":  1234
        },
        "id":  "CVE-2024-23839-d44ca2f9",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "target":  {
            "file":  "src/detect-http-header.c",
            "function":  "DetectHttpResponseHeaderRegister"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "function_hash":  "42680598968147550131556502817169503445",
            "length":  1216
        },
        "id":  "CVE-2024-23839-d61038bc",
        "signature_type":  "Function",
        "signature_version":  "v1",
        "source":  "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "target":  {
            "file":  "src/detect-http-header.c",
            "function":  "DetectHttpRequestHeaderRegister"
        }
    },
    {
        "deprecated":  false,
        "digest":  {
            "line_hashes":  [
                "95854630627550112152669568347944395183",
                "123551874327214207405335637704689412725",
                "315429456141243864960096748431783237940",
                "233168686263502089879976329668258692255",
                "127374149780978768626865242823149074485",
                "228714731679697008511300139750879903622",
                "66302643253542945781597810037651131145",
                "91480801871289248178938369307048231566",
                "249202633849977393358262079364224706315",
                "189452672862140410757333540568673385660",
                "205767851414667831299433431414090659621",
                "244897086929176758784533191013235390417",
                "28300696445405970269920056881685453992",
                "185471832444854767940291488660770932458",
                "314372135556690044813822808863046061697",
                "109353331319757449432311399688088795011",
                "168754156993292387045637196334681321614",
                "133090254437221512568596444953619001936",
                "198755386643640366460099811065080794811",
                "146962589220571506081188436976583712254",
                "288443776959337827942934402748200325387",
                "218605863989959861389237740577066319011",
                "234248151683660641923813293917942221764",
                "168139019393821768284562142745987572697",
                "23482439456264419999872166907561363471",
                "49813932668150950602730911434461467008",
                "177915162109008082793315930404243102753",
                "303010253074177993257882775512134065906",
                "16458480318637906673775034802540897809",
                "59098138864530900488918522131243760757",
                "308205055488187799903171995075039270796",
                "258075747848144534069032414026095731137",
                "173146032092714621008721104672764116051",
                "78084760805515496722001057687959656982",
                "59993150915758896830698473006214392480",
                "26231708794938661823406591003899393644",
                "4943373885433910067791838252072363209",
                "204577279005492945345530641259717891243",
                "270249798546725190670392716529270944600",
                "107866347090419913964280034149860738271",
                "167212428767209261478100443856474875189",
                "173143266095716895208030431958190447131",
                "331286533550946905219545239773349536754",
                "290753091417118425046562170176166278209",
                "308747481007737751576494794751284564010",
                "296209098343051157680051581399990711405",
                "316349834651361852094970421490805725458",
                "33723132219050451917312241691080017992",
                "224407674496042021721224534108379961690",
                "118267918114822580653994923696578645756",
                "93820071963560364003456818956234904396",
                "332475307847122866001013153909402191752",
                "297092758945185865280482896833499501637",
                "128662137044466857667143330695416587593"
            ],
            "threshold":  0.9
        },
        "id":  "CVE-2024-23839-eb08a769",
        "signature_type":  "Line",
        "signature_version":  "v1",
        "source":  "https://github.com/oisf/suricata/commit/cd731fcaf42e5f7078c9be643bfa0cee2ad53e8f",
        "target":  {
            "file":  "src/detect-http-header.c"
        }
    }
]
vanir_signatures_modified 
"2026-08-18T17:26:36Z"