Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-32664 EUVD-2024-30455

Suricata's base64 contains an out of bounds write

Published May 7, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with `base64_decode` keyword with `bytes` option with value 1, 2 or 5 and for 7.0.x, setting `app-layer.protocols.smtp.mime.body-md5` to false.

Affected products

VendorProductAffectedFixed
OISF suricata >= 6.0.0, <= 6.0.18, >= 7.0.0, <= 7.0.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 suricata 1:7.0.5-1 —
Debian 13 suricata 1:7.0.5-1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 suricata No fix yet —
Ubuntu 26.04 LTS suricata No fix yet —
Ubuntu 25.10 suricata No fix yet —
Ubuntu 24.04 LTS suricata No fix yet —
Ubuntu 22.04 LTS suricata No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS suricata No fix yet —
Ubuntu 16.04 LTS suricata No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed suricata 8.0.0-1.1 openSUSE-SU-2025:15394-1
ReleasePackageFixed inAdvisory
Alpine v3.24 suricata 7.0.6-r0 —
Alpine v3.23 suricata 7.0.6-r0 —
Alpine v3.22 suricata 7.0.6-r0 —
Alpine v3.21 suricata 7.0.6-r0 —
Alpine v3.20 suricata 7.0.6-r0 —

Advisories 2

References