CVE-2024-32867

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, various problems in handling of fragmentation anomalies can lead to mis-detection of rules and policy. This vulnerability is fixed in 7.0.5 or 6.0.19.

• CWE-754
• CWE-754

• https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9Patch
• https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66Patch
• https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634Patch
• https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4bPatch
• https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9Patch
• https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8Patch
• https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5Vendor Advisory
• https://redmine.openinfosecfoundation.org/issues/6672Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/6673Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/6677Issue Tracking
• https://github.com/OISF/suricata/commit/1e110d0a71db46571040b937e17a4bc9f91d6de9Patch
• https://github.com/OISF/suricata/commit/2f39ba75f153ba9bdf8eedc2a839cc973dbaea66Patch
• https://github.com/OISF/suricata/commit/414f97c6695c5a2e1d378a36a6f50d7288767634Patch
• https://github.com/OISF/suricata/commit/bf3d420fb709ebe074019a99e3bd3a2364524a4bPatch
• https://github.com/OISF/suricata/commit/d13bd2ae217a6d2ceb347f74d27cbfcd37b9bda9Patch
• https://github.com/OISF/suricata/commit/e6267758ed5da27f804f0c1c07f9423bdf4d72b8Patch
• https://github.com/OISF/suricata/security/advisories/GHSA-xvrx-88mv-xcq5Vendor Advisory
• https://redmine.openinfosecfoundation.org/issues/6672Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/6673Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/6677Issue Tracking

Published

May 7, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32861Under certain circumstances the impacted Software House C•CU…7.8
• CVE-2024-32862Under certain circumstances the ExacqVision Web Services doe…8.1
• CVE-2024-32863Under certain circumstances the exacqVision Web Services may…8.8
• CVE-2024-32864Under certain circumstances exacqVision Web Services will no…8.1
• CVE-2024-32865Under certain circumstances the exacqVision Server will not …7.3
• CVE-2024-32866Conform, a type-safe form validation library, allows the par…8.6
• CVE-2024-32868ZITADEL provides users the possibility to use Time-based One…8.1
• CVE-2024-32869Hono is a Web application framework that provides support fo…5.3
• CVE-2024-3287The SmartCrawl WordPress SEO checker, SEO analyzer, SEO opti…5.3
• CVE-2024-32870Combodo iTop is a simple, web based IT Service Management to…5.8
• CVE-2024-32871Pimcore is an Open Source Data & Experience Management Platf…7.5
• CVE-2024-32872Umbraco workflow provides workflows for the Umbraco content …5.5