Vulnerability Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Oisf | Suricata | < 7.0.8 |
Related Weaknesses (CWE)
References
- https://github.com/OISF/suricata/commit/19cf0f81335d9f787d587450f7105ad95a648951Patch
- https://github.com/OISF/suricata/commit/37f4c52b22fcdde4adf9b479cb5700f89d00768dPatch
- https://github.com/OISF/suricata/commit/3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2dPatch
- https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2jVendor Advisory
- https://redmine.openinfosecfoundation.org/issues/7280Permissions Required
FAQ
What is CVE-2024-55628?
CVE-2024-55628 is a vulnerability with a CVSS score of 7.5 (HIGH). Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messag...
How severe is CVE-2024-55628?
CVE-2024-55628 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-55628?
Check the references section above for vendor advisories and patch information. Affected products include: Oisf Suricata.