Approved changes feed: RSS · Atom

cpe:2.3:a:oisf:suricata:7.0.0:*:*:*:*:*:*:*

part: a version: 7.0.0 update: *

VendorOisf (cd5e037f-1562-515c-af4f-7fdde1a9512b)
ProductSuricata (4997bdfc-e075-545a-b5bf-6c424b0d2e55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37151 vulnerable 2026-06-08 06:39:46.717003 Suricata defrag: IP ID reuse can lead to policy bypass
MEDIUM (5.3)
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.
Published: 2024-07-11T14:39:32.766Z
Updated: 2025-11-03T19:30:13.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.