CVE-2024-45795: oisf suricata Reachable Assertion
Vulnerability summary
CVE-2024-45795 is a high (CVSS 7.5) Reachable Assertion vulnerability in oisf suricata. EPSS estimates a 0.53% chance of exploitation in the next 30 days, higher than 43.7% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 2 · Related 1Timeline
- 16-10-2024PublishedVulnerability first disclosed.
- 02-04-2026Last modifiedVulnerability information updated.
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service. This issue is addressed in 7.0.7. As a workaround, use only trusted and well tested rulesets.
CVSS metrics
4 scores · 4 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
0.53%
Chance of exploitation in the next 30 days
Percentile
44%
Versus all other CVEs
30-day change
0.00 pp
From 0.53% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Debian1 product
- suricata< 1:7.0.7-1
Oisf1 product
- suricata< 7.0.7
Ubuntu1 product
- suricataAll versions (No fix recorded)
3 vendors · 3 products
References
5 links- github.com/OISF/suricata/security/advisories/GHSA-6r8w-fpw6-cp9gX Refsource CONFIRMREPORTThird Party Advisory
