mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-30 18:04:30 +00:00
110 lines
4.1 KiB
JSON
110 lines
4.1 KiB
JSON
{
|
|
"data_version": "4.0",
|
|
"data_type": "CVE",
|
|
"data_format": "MITRE",
|
|
"CVE_data_meta": {
|
|
"ID": "CVE-2024-37151",
|
|
"ASSIGNER": "security-advisories@github.com",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. \nMishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "CWE-754: Improper Check for Unusual or Exceptional Conditions",
|
|
"cweId": "CWE-754"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"vendor_name": "OISF",
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "suricata",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": ">= 6.0.0, < 6.0.20"
|
|
},
|
|
{
|
|
"version_affected": "=",
|
|
"version_value": ">= 7.0.0,< 7.0.6"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"url": "https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24"
|
|
},
|
|
{
|
|
"url": "https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0"
|
|
},
|
|
{
|
|
"url": "https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b",
|
|
"refsource": "MISC",
|
|
"name": "https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6b"
|
|
},
|
|
{
|
|
"url": "https://redmine.openinfosecfoundation.org/issues/7041",
|
|
"refsource": "MISC",
|
|
"name": "https://redmine.openinfosecfoundation.org/issues/7041"
|
|
},
|
|
{
|
|
"url": "https://redmine.openinfosecfoundation.org/issues/7042",
|
|
"refsource": "MISC",
|
|
"name": "https://redmine.openinfosecfoundation.org/issues/7042"
|
|
}
|
|
]
|
|
},
|
|
"source": {
|
|
"advisory": "GHSA-qrp7-g66m-px24",
|
|
"discovery": "UNKNOWN"
|
|
},
|
|
"impact": {
|
|
"cvss": [
|
|
{
|
|
"attackComplexity": "LOW",
|
|
"attackVector": "NETWORK",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 5.3,
|
|
"baseSeverity": "MEDIUM",
|
|
"confidentialityImpact": "NONE",
|
|
"integrityImpact": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"userInteraction": "NONE",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
|
|
"version": "3.1"
|
|
}
|
|
]
|
|
}
|
|
} |