CVE-2024-45796

5.3 mediumEPSS 0.5%

Medium (5.3) in oisf suricata. EPSS 0.5% chance of exploitation in the next 30 days.

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-11-01)
CWE: CWE-193
Published: 2024-10-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oisf:suricata

References

https://github.com/OISF/suricata/security/advisories/GHSA-mf6r-3xp2-v7xg
https://redmine.openinfosecfoundation.org/issues/7067
https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html

Check your stack JSON