Stay Secure with the Latest Linux Advisories

security advisorymoderate severitypacket handling

Mageia 9 MGASA-2024-0306: Moderate Suricata Packet Handling Issues

CVE-2024-37151 Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. CVE-2024-38534 Crafted modbus traffic can lead to unlimited resource accumulation within a flow . MGASA-2024-0306 - Updated suricata packages fix security vulnerabilities Publication date: 17 Sep 2024 URL: https://advisories.mageia.org/MGASA-2024-0306.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-37151, CVE-2024-38534, CVE-2024-38535, CVE-2024-38536 CVE-2024-37151 Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. CVE-2024-38534 Crafted modbus traffic can lead to unlimited resource accumulation within a flow CVE-2024-38535, CVE-2024-38536 Suricata can run out of memory when parsing crafted HTTP/2 traffic. References: - https://bugs.mageia.org/show_bug.cgi?id=33431 - https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/JJWELU75TPOICUA2UGNZDY7QQJBB7HYJ/ - https://www.cve.org/CVERecord?id=CVE-2024-37151 - https://www.cve.org/CVERecord?id=CVE-2024-38534 - https://www.cve.org/CVERecord?id=CVE-2024-38535 - https://www.cve.org/CVERecord?id=CVE-2024-38536 SRPMS: - 9/core/suricata-6.0.20-1.mga9 . Revised Nginx bundles for Fedora solve serious vulnerability concerns, tackling request processing and memory exploitation problems.. Mageia Security, Suricata Updates, Resource Management, Packet Handling, Security Fixes. . LinuxSecurity.com Team

Sep 17, 2024 Mageia