CVE-2024-32663

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.5 and 6.0.19

Description Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine. A small amount of HTTP/2 traffic can lead to Suricata using a large amount of memory. The issue has been addressed in Suricata 7.0.5 and 6.0.19.

Recommendations For Suricata versions prior to 7.0.5, update to version 7.0.5 to resolve the issue. For Suricata versions prior to 6.0.19, update to version 6.0.19 to resolve the issue. As a temporary workaround, consider disabling the HTTP/2 parser. Reduce the app-layer.protocols.http2.max-table-size value (default is 65536) to minimize the risk of exploitation.