What is CVE-2024-32867?

CVE-2024-32867 is a medium-severity vulnerability in Oisf Suricata, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.3/10. Published 2024-05-07.

How severe is CVE-2024-32867?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Is CVE-2024-32867 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Oisf Suricata

CVE-2024-32867

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

Published 2024-05-07 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

EPSS exploit prediction

EPSS: 0.007 (51.3th percentile), scored 2026-10-01.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 51st percentile — 51.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.007 · newest: 0.007 · change: 0.000

Affected products

Oisf Suricata — versions >= 6.0.0, <= 6.0.18, >= 7.0.0, <= 7.0.4

Weakness classification (CWE)

CWE-754 — Improper Check for Unusual or Exceptional Conditions

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5 (Vendor Advisory)
github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9 (Patch)
github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66 (Patch)
github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634 (Patch)
github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4b (Patch)
github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9 (Patch)
github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8 (Patch)
redmine.openinfosecfoundation.org/issues/6672 (Issue Tracking)
redmine.openinfosecfoundation.org/issues/6673 (Issue Tracking)
redmine.openinfosecfoundation.org/issues/6677 (Issue Tracking)

Frequently asked questions

What is CVE-2024-32867?: CVE-2024-32867 is a medium-severity vulnerability in Oisf Suricata, classified under Improper Check for Unusual or Exceptional Conditions. CVSS score: 5.3/10. Published 2024-05-07.
How severe is CVE-2024-32867?: Medium severity. CVSS v3 base score is 5.3 out of 10.
Is CVE-2024-32867 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.