{"id":"CVE-2024-23836","aliases":["DEBIAN-CVE-2024-23836","EUVD-2024-21278","GHSA-q33q-45cr-3cpc","UBUNTU-CVE-2024-23836","openSUSE-SU-2025:15394-1"],"status":"published","title":"crafted traffic can cause denial of service","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.01164,"percentile":0.67707,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-770"],"published":"2024-02-26T15:44:03Z","modified":"2026-11-02T12:00:49Z","fixes":[{"ecosystem":"Debian:13","package":"suricata","fixed_in":["1:7.0.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"suricata","fixed_in":["1:7.0.3-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:13","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.0.3-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.8-1build1","2.0.9-1","2.0.10-1","2.0.10-2","2.0.11-1","3.0-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.0.4-2","1:6.0.4-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.0.0-2","1:7.0.2-1","1:7.0.2-1build1","1:7.0.3-1build1","1:7.0.3-1build3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.0.8-2","1:7.0.10-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.0.3-1","1:8.0.5-1","1:8.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.0.10-1","1:8.0.1-3build1","1:8.0.2-1","1:8.0.2-1build1","1:8.0.3-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"suricata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.0.0-1.1"}]}],"bundled":30}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"oisf","product":"suricata"}],"references":[{"url":"https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","tags":["x_refsource_MISC","x_transferred","Patch","fix","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6531","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6532","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6540","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6658","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6659","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://redmine.openinfosecfoundation.org/issues/6660","tags":["x_refsource_MISC","x_transferred","Issue Tracking","web","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/","tags":["x_transferred","Mailing List","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/","tags":["x_transferred","Mailing List","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23836","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2024-23836","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2024-23836","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23836","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-14568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10050","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-10053","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23835","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23836","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23839","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32663","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32664","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-32867","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-37151","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38536","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45795","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45796","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-45797","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47187","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47188","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-47522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55626","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55627","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55628","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29915","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29916","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29917","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-29918","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-23836","title":"crafted traffic can cause denial of service","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T15:44:03.308Z","modified":"2025-02-13T17:39:55.194Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-21278","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T15:44:03Z","modified":"2025-02-13T17:39:55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:03:47.088299Z"}],"nvd":[{"id":"CVE-2024-23836","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T16:27:57.693Z","modified":"2026-06-17T07:13:42.537Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T14:09:38.473056Z"}],"osv":[{"id":"CVE-2024-23836","title":"crafted traffic can cause denial of service","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T15:44:03.308Z","modified":"2026-10-28T10:40:15.872347888Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:44:38.897406Z"},{"id":"DEBIAN-CVE-2024-23836","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T16:27:57.693Z","modified":"2026-11-02T12:00:49.707574609Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:41.849198Z"},{"id":"UBUNTU-CVE-2024-23836","description":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","status":"published","published":"2024-02-26T16:27:00Z","modified":"2026-10-17T12:56:32.558279435Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:42.68848Z"},{"id":"openSUSE-SU-2025:15394-1","title":"libsuricata8_0_0-8.0.0-1.1 on GA media","description":"These are all security issues fixed in the libsuricata8_0_0-8.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-07-28T00:00:00Z","modified":"2026-03-23T04:53:43.337191Z","updated_at":"2026-11-02T16:58:37.810934Z"}]}}