CVE-2024-55627

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.8, a specially crafted TCP stream can lead to a very large buffer overflow while being zero-filled during initialization with memset due to an unsigned integer underflow. The issue has been addressed in Suricata 7.0.8.

• CWE-122
• CWE-191
• CWE-787

• https://github.com/OISF/suricata/commit/282509f70c4ce805098e59535af445362e3e9ebdPatch
• https://github.com/OISF/suricata/commit/8900041405dbb5f9584edae994af2100733fb4bePatch
• https://github.com/OISF/suricata/commit/9a53ec43b13f0039a083950511a18bf6f408e432Patch
• https://github.com/OISF/suricata/security/advisories/GHSA-h2mv-7gg8-8x7vVendor Advisory
• https://redmine.openinfosecfoundation.org/issues/7393Permissions Required

Published

Jan 6, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-55602PwnDoc is a penetration test report generator. Prior to comm…8.5
• CVE-2024-55603Kanboard is project management software that focuses on the …6.5
• CVE-2024-55604Appsmith is a platform to build admin panels, internal tools…4.3
• CVE-2024-55605Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-5561The Popup Maker WordPress plugin before 1.19.1 does not san…4.8
• CVE-2024-55626Suricata is a network Intrusion Detection System, Intrusion …5.5
• CVE-2024-55628Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-55629Suricata is a network Intrusion Detection System, Intrusion …7.5
• CVE-2024-55630Joplin is a free, open source note taking and to-do applicat…5.5
• CVE-2024-55631An engine link following vulnerability in Trend Micro Apex O…7.8
• CVE-2024-55632A security agent link following vulnerability in Trend Micro…7.8
• CVE-2024-55633Improper Authorization vulnerability in Apache Superset. On …6.5