CVE-2024-47188

Name of the Vulnerable Software and Affected Versions Suricata versions prior to 7.0.7

Description The issue is related to the missing initialization of the random seed for thash, leading to predictable hash table behavior in byte-range tracking. This can cause severe performance degradation if an attacker forces a large amount of data into a single hash bucket. Suricata is a network Intrusion Detection System, Intrusion Prevention System, and Network Security Monitoring engine.

Recommendations For versions prior to 7.0.7, update to version 7.0.7 to address the issue.