CVE-2024-37151

5.3MEDIUM

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to

发布于: 7/11/2024更新于: 11/3/2025
在NVD查看在MITRE查看

描述

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.

AI分析AI驱动

受影响产品

oisfsuricata
oisfsuricata

参考资料