{
  "cveId": "CVE-2024-24568",
  "url": "https://patchblox.com/security/cve/CVE-2024-24568",
  "summary": "CVE-2024-24568 is fixed in suricata on 1 platform, first by DEBIAN-CVE-2024-24568, released February 26, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "suricata: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine",
  "description": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine.  Prior to 7.0.3, the rules inspecting HTTP2 headers can get bypassed by crafted traffic. The vulnerability has been patched in 7.0.3.",
  "published": "2024-02-26T16:27:58Z",
  "severity": "medium",
  "cvss": 5.3,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
  "epss": 0.00638,
  "epssPercentile": 0.50837,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "suricata",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "1:7.0.3-1",
      "fix": "DEBIAN-CVE-2024-24568",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-24568",
      "released": "2024-02-26T16:27:58Z"
    },
    {
      "platform": "linux",
      "product": "suricata",
      "release": "Debian 14",
      "fixedVersion": "1:7.0.3-1",
      "fix": "DEBIAN-CVE-2024-24568",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2024-24568",
      "released": "2024-02-26T16:27:58Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T19:12:23Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}