Описание
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
A flaw was found in Suricata. A remote attacker can exploit this vulnerability by sending a flood of crafted HTTP2 continuation frames. This can lead to memory exhaustion, causing the Suricata process to shut down, resulting in a Denial of Service (DoS).
Отчет
Important: A flaw in Suricata allows a remote attacker to trigger a Denial of Service. By sending a flood of specially crafted HTTP2 continuation frames, an attacker can cause memory exhaustion, leading to the Suricata process shutting down. This vulnerability affects Suricata deployments configured to inspect HTTP2 traffic.
Меры по смягчению последствий
To mitigate this issue, consider deploying Suricata behind a network firewall or load balancer capable of inspecting and rate-limiting HTTP/2 traffic. This can help prevent a flood of crafted HTTP/2 continuation frames from reaching the Suricata instance, thereby reducing the risk of memory exhaustion and denial of service. Ensure that any such network device is configured to handle HTTP/2 traffic appropriately and that its own security posture is robust.
Дополнительная информация
Статус:
EPSS
7.5 High
CVSS3
Связанные уязвимости
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.1 ...
Уязвимость системы обнаружения и предотвращения вторжений Suricata, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
7.5 High
CVSS3