Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-45795

Suricata detect/datasets: reachable assertion with unimplemented rule option

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, rules using datasets with the non-functional / unimplemented "unset" option can trigger an assertion during traffic parsing, leading to denial of service. This issue is addressed in 7.0.7. As a workaround, use only trusted and well tested rulesets.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OISF suricata

  • < 7.0.7affected

References