CVE-2024-23836

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Feb 26, 2024
Updated: Mar 7, 2024
CWE ID 770

Summary

CVE-2024-23836 is a vulnerability affecting Suricata, a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. The vulnerability exists in versions prior to 6.0.16 and 7.0.3 and can be exploited by an attacker to cause Suricata to consume excessive CPU and memory resources, resulting in severe slowdowns and potential denial of service. The issue has a high severity rating with a base score of 7.5. To remediate the vulnerability, users should update Suricata to version 6.0.16 or 7.0.3, or apply workarounds such as disabling the affected protocol app-layer parser or reducing the `stream.reassembly.depth` value to mitigate the severity of the issue.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23836 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options