CVE-2024-38536

Name of the Vulnerable Software and Affected Versions: Suricata versions prior to 7.0.6

Description: A memory allocation failure due to http.memcap being reached leads to a NULL-ptr reference, resulting in a crash. This issue can be exploited by a remote attacker to cause a denial of service.

Recommendations: For versions prior to 7.0.6, upgrade to 7.0.6 to resolve the issue. As a temporary workaround, consider adjusting the http.memcap setting to prevent the memory allocation failure until a patch is applied. Restrict access to the Suricata engine to minimize the risk of exploitation.