CVE-2024-32664
Suricata's base64 contains an out of bounds write
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with `base64_decode` keyword with `bytes` option with value 1, 2 or 5 and for 7.0.x, setting `app-layer.protocols.smtp.mime.body-md5` to false.
Suricata es un sistema de detección de intrusiones en la red, un sistema de prevención de intrusiones y un motor de monitoreo de seguridad de la red. Antes de 7.0.5 y 6.0.19, el tráfico o los conjuntos de datos especialmente manipulados pueden provocar un desbordamiento limitado del búfer. Esta vulnerabilidad se solucionó en 7.0.5 y 6.0.19. Los workarounds incluyen no usar reglas con la palabra clave `base64_decode` con la opción `bytes` con valor 1, 2 o 5 y para 7.0.x, establecer `app-layer.protocols.smtp.mime.body-md5` en falso.
CVSS Scores
SSVC
- Decision:Attend
Timeline
- 2024-04-16 CVE Reserved
- 2024-04-23 CVE Published
- 2024-05-08 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
- CWE-122: Heap-based Buffer Overflow
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
https://github.com/OISF/suricata/commit/311002baf288a225f62cf18a90c5fdd294447379 | X_refsource_misc | |
https://github.com/OISF/suricata/commit/d5ffecf11ad2c6fe89265e518f5d7443caf26ba4 | X_refsource_misc | |
https://github.com/OISF/suricata/security/advisories/GHSA-79vh-hpwq-3jh7 | X_refsource_confirm |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
OISF Search vendor "OISF" | Suricata Search vendor "OISF" for product "Suricata" | >= 6.0.0 <= 6.0.18 Search vendor "OISF" for product "Suricata" and version " >= 6.0.0 <= 6.0.18" | en |
Affected
| ||||||
OISF Search vendor "OISF" | Suricata Search vendor "OISF" for product "Suricata" | >= 7.0.0 <= 7.0.4 Search vendor "OISF" for product "Suricata" and version " >= 7.0.0 <= 7.0.4" | en |
Affected
|