Skip to content
OpenAdvisories
High · 7.5 CVE-2024-47187 EUVD-2024-42303

Suricata datasets: missing hashtable random seed leads to potential DoS

Published Oct 16, 2024 · Updated Oct 16, 2024 · Assigned by GitHub_M

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use excessive time to load, as well as runtime performance issues during traffic handling. This issue has been addressed in 7.0.7. As a workaround, avoid loading datasets from untrusted sources. Avoid dataset rules that track traffic in rules.

Affected products

VendorProductAffectedFixed
OISF suricata < 7.0.7 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 suricata 1:7.0.7-1 —
Debian 13 suricata 1:7.0.7-1 —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 suricata No fix yet —
Ubuntu 26.04 LTS suricata No fix yet —
Ubuntu 25.10 suricata No fix yet —
Ubuntu 24.04 LTS suricata No fix yet —
Ubuntu 22.04 LTS suricata No fix yet —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS suricata No fix yet —
Ubuntu 16.04 LTS suricata No fix yet —
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed suricata 8.0.0-1.1 openSUSE-SU-2025:15394-1
ReleasePackageFixed inAdvisory
Alpine v3.24 suricata 7.0.7-r0 —
Alpine v3.23 suricata 7.0.7-r0 —
Alpine v3.22 suricata 7.0.7-r0 —
Alpine v3.21 suricata 7.0.7-r0 —
Alpine v3.20 suricata 7.0.7-r0 —

Advisories 1

References