CVE-2024-55626: oisf suricata Integer Overflow to Buffer Overflow

Vulnerability summary

CVE-2024-55626 is a medium (CVSS 5.5) Integer Overflow to Buffer Overflow vulnerability in oisf suricata. EPSS estimates a 0.25% chance of exploitation in the next 30 days, higher than 15.1% of scored vulnerabilities.

Timeline

1. 06-01-2025
   PublishedVulnerability first disclosed.
2. 03-11-2025
   Last modifiedVulnerability information updated.

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a large BPF filter file provided to Suricata at startup can lead to a buffer overflow at Suricata startup. The issue has been addressed in Suricata 7.0.8.

• CWE-680Integer Overflow to Buffer OverflowThe product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.