Bug 2297332 (CVE-2024-37151) - CVE-2024-37151 suricata: packet reassembly failure, which can lead to policy bypass
Summary: CVE-2024-37151 suricata: packet reassembly failure, which can lead to policy ...
Keywords:
Status: CLOSED NEXTRELEASE
Alias: CVE-2024-37151
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2297342 2297343
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-07-11 15:20 UTC by OSIDB Bzimport
Modified: 2024-10-28 16:59 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2024-07-12 13:44:21 UTC
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2024-07-11 15:20:28 UTC 
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. 
Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.
Comment 1 Steve Grubb 2024-07-12 13:44:21 UTC 
Updates are in testing. closing this.
Note You need to log in before you can comment on or make changes to this bug.