What is CVE-2024-28870?

CVE-2024-28870 is a high-severity vulnerability in Oisf Suricata, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2024-04-03.

How severe is CVE-2024-28870?

High severity. CVSS v3 base score is 7.5 out of 10.

Resource exhaustion in Oisf Suricata

CVE-2024-28870

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in alert records. This issue has been patched in versions 6.0.17 and 7.0.4.

EPSS: 0.006 (44.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Oisf Suricata — versions <= 6.0.16, >= 7.0.0, <= 7.0.3

Weakness classification (CWE)

CWE-770 — Allocation of Resources Without Limits or Throttling

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2024-28870?: CVE-2024-28870 is a high-severity vulnerability in Oisf Suricata, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2024-04-03.
How severe is CVE-2024-28870?: High severity. CVSS v3 base score is 7.5 out of 10.