CVE-2024-37151

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Mishandling of multiple fragmented packets using the same IP ID value can lead to packet reassembly failure, which can lead to policy bypass. Upgrade to 7.0.6 or 6.0.20. When using af-packet, enable `defrag` to reduce the scope of the problem.

• CWE-754
• CWE-754

• https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0Patch
• https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6bPatch
• https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24Vendor Advisory
• https://redmine.openinfosecfoundation.org/issues/7041Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/7042Issue Tracking
• https://github.com/OISF/suricata/commit/9d5c4273cb7e5ca65f195f7361f0d848c85180e0Patch
• https://github.com/OISF/suricata/commit/aab7f35c76721df19403a7c0c0025feae12f3b6bPatch
• https://github.com/OISF/suricata/security/advisories/GHSA-qrp7-g66m-px24Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html
• https://redmine.openinfosecfoundation.org/issues/7041Issue Tracking
• https://redmine.openinfosecfoundation.org/issues/7042Issue Tracking

Published

Jul 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37146Flowise is a drag & drop user interface to build a customize…6.1
• CVE-2024-37147GLPI is an open-source asset and IT management software pack…4.3
• CVE-2024-37148GLPI is an open-source asset and IT management software pack…8.1
• CVE-2024-37149GLPI is an open-source asset and IT management software pack…8.8
• CVE-2024-3715The Database for Contact Form 7, WPforms, Elementor forms pl…7.2
• CVE-2024-37150An issue in `.npmrc` support in Deno 1.44.0 was discovered w…6.5
• CVE-2024-37152Argo CD is a declarative, GitOps continuous delivery tool fo…7.5
• CVE-2024-37153Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmo…7.5
• CVE-2024-37154Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmo…5.3
• CVE-2024-37155OpenCTI is an open source platform allowing organizations to…8.2
• CVE-2024-37156The SuluFormBundle adds support for creating dynamic forms i…6.1
• CVE-2024-37157Discourse is an open-source discussion platform. Prior to ve…5.3