GCVE - cpe:2.3:a:oisf:suricata:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oisf:suricata:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Oisf (`cd5e037f-1562-515c-af4f-7fdde1a9512b`)
Product	Suricata (`4997bdfc-e075-545a-b5bf-6c424b0d2e55`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/suricata`	purl2cpe	2026-06-01 10:17:52.124452
`pkg:deb/ubuntu/suricata`	purl2cpe	2026-06-01 10:17:52.124453
`pkg:github/oisf/suricata`	purl2cpe	2026-06-01 10:17:52.124455
`pkg:rpm/fedora/suricata`	purl2cpe	2026-06-01 10:17:52.124456
`pkg:rpm/opensuse/suricata`	purl2cpe	2026-06-01 10:17:52.124457

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-38536`	vulnerable	2026-06-08 06:41:47.647570	Suricata http/range: NULL-ptr deref when http.memcap is reached HIGH (7.5) Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A memory allocation failure due to `http.memcap` being reached leads to a NULL-ptr reference leading to a crash. Upgrade to 7.0.6. Published: 2024-07-11T14:54:32.547Z Updated: 2024-08-02T04:12:25.271Z Open on db.gcve.eu Reference links https://github.com/OISF/suricata/security/advisories/GHSA-j32j-4w6g-94hh https://redmine.openinfosecfoundation.org/issues/7029 https://redmine.openinfosecfoundation.org/issues/7033	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32867`	vulnerable	2026-06-08 06:37:24.605784	Suricata's defrag contains various issues leading to policy bypass MEDIUM (5.3) Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19. Published: 2024-05-07T15:06:58.326Z Updated: 2024-08-02T02:20:35.604Z Open on db.gcve.eu Reference links https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5 https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9 https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66 https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634 https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-32664`	vulnerable	2026-06-08 06:37:23.549469	Suricata's base64 contains an out of bounds write MEDIUM (5.3) Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with `base64_decode` keyword with `bytes` option with value 1, 2 or 5 and for 7.0.x, setting `app-layer.protocols.smtp.mime.body-md5` to false. Published: 2024-05-07T14:57:01.967Z Updated: 2024-08-02T02:13:40.336Z Open on db.gcve.eu Reference links https://github.com/OISF/suricata/security/advisories/GHSA-79vh-hpwq-3jh7 https://github.com/OISF/suricata/commit/311002baf288a225f62cf18a90c5fdd294447379 https://github.com/OISF/suricata/commit/d5ffecf11ad2c6fe89265e518f5d7443caf26ba4	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.