Approved changes feed: RSS · Atom

cpe:2.3:a:oisf:suricata:6.0.0:-:*:*:*:*:*:*

part: a version: 6.0.0 update: -

VendorOisf (cd5e037f-1562-515c-af4f-7fdde1a9512b)
ProductSuricata (4997bdfc-e075-545a-b5bf-6c424b0d2e55)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/suricata purl2cpe 2026-06-01 10:17:52.125352
pkg:deb/ubuntu/suricata purl2cpe 2026-06-01 10:17:52.125353
pkg:github/oisf/suricata purl2cpe 2026-06-01 10:17:52.125354
pkg:rpm/fedora/suricata purl2cpe 2026-06-01 10:17:52.125356
pkg:rpm/opensuse/suricata purl2cpe 2026-06-01 10:17:52.125357

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-37151 vulnerable 2026-06-08 06:39:46.715985 Suricata defrag: IP ID reuse can lead to policy bypass
MEDIUM (5.3)
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.
Published: 2024-07-11T14:39:32.766Z
Updated: 2025-11-03T19:30:13.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.