CVE-2024-24568
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 26, 2024
Updated: Dec 19, 2024
CWE ID 284
Summary
CVE-2024-24568 is a vulnerability affecting Suricata, a widely used network Intrusion Detection System and Intrusion Prevention System. Prior to version 7.0.3, the engine failed to properly inspect HTTP2 headers, leaving it susceptible to bypasses from crafted traffic. This issue has been resolved in the latest release, 7.0.3. Attackers could potentially exploit this vulnerability to evade detection, posing a risk to network security. Suricata users are encouraged to upgrade to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Fedora Operating System
Affected Vendors
- Fedora Project