Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Suricata can run out of memory when parsing crafted HTTP/2 traffic. Upgrade to 6.0.20 or 7.0.6.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security     Monitoring engine. Suricata can run out of memory when parsing crafted HTTP/2 traffic. Upgrade to 6.0.20     or 7.0.6. (CVE-2024-38535)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the suricata package has been released.

ID	Name	Product	Family	Severity
228365	Linux Distros Unpatched Vulnerability : CVE-2024-38535	Nessus	Misc.	high
204638	Photon OS 5.0: Suricata PHSA-2024-5.0-0326	Nessus	PhotonOS Local Security Checks	high
204125	Photon OS 4.0: Suricata PHSA-2024-4.0-0656	Nessus	PhotonOS Local Security Checks	high

Detections

Analytics

CVE-2024-38535

high

Tenable Plugins

high

high

high