CVE catalog

CVE-2024-47187

suricata: CVE-2024-47187

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.32% · Oct 25, 2026

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use excessive time to load, as well as runtime performance issues during traffic handling. This issue has been addressed in 7.0.7. As a workaround, avoid loading datasets from untrusted sources. Avoid dataset rules that track traffic in rules.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
DebiansuricatabookwormNot reportedvulnerable
Debiansuricata131:7.0.7-1fixed
Debiansuricata141:7.0.7-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansuricatadeb131:7.0.7-1Not reportedDEBIAN-CVE-2024-47187Not reported
Debiansuricatadeb141:7.0.7-1Not reportedDEBIAN-CVE-2024-47187Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [suricata]Affected
    Details (2)

    • 1:7.0.10-1~bpo12+1 · amd64 · bookworm-backports

      Affected

      dsa · suricata · debian · bookworm

    • 1:7.0.10-1~bpo12+1 · arm64 · bookworm-backports

      Affected

      dsa · suricata · debian · bookworm

[Debian 13 (Trixie)]

  • [suricata]Fixed
    Details (4)

    • 1:7.0.10-1+deb13u4 · amd64 · trixie

      Fixed · Fixed: 1:7.0.7-1

      dsa · suricata · debian · 13

    • 1:7.0.10-1+deb13u4 · arm64 · trixie

      Fixed · Fixed: 1:7.0.7-1

      dsa · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · amd64 · trixie-backports

      Fixed · Fixed: 1:7.0.7-1

      dsa · suricata · debian · 13

    • 1:8.0.6-1~bpo13+1 · arm64 · trixie-backports

      Fixed · Fixed: 1:7.0.7-1

      dsa · suricata · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]