CVE-2024-23835

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.3, excessive memory use during pgsql parsing could lead to OOM-related crashes. This vulnerability is patched in 7.0.3. As workaround, users can disable the pgsql app layer parser.

• CWE-400
• CWE-770
• CWE-770

• https://github.com/OISF/suricata/commit/86de7cffa7e8f06fe9d600127e7dabe89c7e81ddPatch
• https://github.com/OISF/suricata/commit/f52c033e566beafb4480c139eb18662a2870464fPatch
• https://github.com/OISF/suricata/security/advisories/GHSA-8583-353f-mvwcIssue Tracking, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/Mailing List
• https://redmine.openinfosecfoundation.org/issues/6411Issue Tracking, Vendor Advisory
• https://github.com/OISF/suricata/commit/86de7cffa7e8f06fe9d600127e7dabe89c7e81ddPatch
• https://github.com/OISF/suricata/commit/f52c033e566beafb4480c139eb18662a2870464fPatch
• https://github.com/OISF/suricata/security/advisories/GHSA-8583-353f-mvwcIssue Tracking, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/Mailing List
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/Mailing List
• https://redmine.openinfosecfoundation.org/issues/6411Issue Tracking, Vendor Advisory

Published

Feb 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-2383A clickjacking vulnerability exists in zenml-io/zenml versio…6.1
• CVE-2024-23830MantisBT is an open source issue tracker. Prior to version 2…8.3
• CVE-2024-23831LedgerSMB is a free web-based double-entry accounting system…7.5
• CVE-2024-23832Mastodon is a free, open-source social network server based …9.8
• CVE-2024-23833OpenRefine is a free, open source power tool for working wit…7.5
• CVE-2024-23834Discourse is an open-source discussion platform. Improperly …6.1
• CVE-2024-23836Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-23837LibHTP is a security-aware parser for the HTTP protocol. Cra…7.5
• CVE-2024-23838TrueLayer.NET is the .Net client for TrueLayer. The vulnera…7.5
• CVE-2024-23839Suricata is a network Intrusion Detection System, Intrusion …8.1
• CVE-2024-2384The WooCommerce POS plugin for WordPress is vulnerable to in…4.3
• CVE-2024-23840GoReleaser builds Go binaries for several platforms, creates…5.5