DEBIAN-CVE-2024-23839
- Source
- https://security-tracker.debian.org/tracker/CVE-2024-23839
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-23839.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2024-23839
- Upstream
- Published
- 2024-02-26T16:27:58.090Z
- Modified
- 2025-11-14T04:01:24.020362Z
- Severity
-
- 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.3, specially crafted traffic can cause a heap use after free if the ruleset uses the http.requestheader or http.responseheader keyword. The vulnerability has been patched in 7.0.3. To work around the vulnerability, avoid the http.requestheader and http.responseheader keywords.
- References
Affected packages
Debian:13 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source
Debian:14 / suricata
Package
- Name
- suricata
- Purl
- pkg:deb/debian/suricata?arch=source