What’s Vulnerable › Vulnerabilities

CVE-2024-32664: Suricata's base64 contains an out of bounds write

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-07 · updated 2026-06-17
• Weakness: CWE-120

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.5 and 6.0.19, specially crafted traffic or datasets can cause a limited buffer overflow. This vulnerability is fixed in 7.0.5 and 6.0.19. Workarounds include not use rules with `base64_decode` keyword with `bytes` option with value 1, 2 or 5 and for 7.0.x, setting `app-layer.protocols.smtp.mime.body-md5` to false.

Affected products

• OISF suricata: from 6.0.0 before 6.0.19; from 7.0.0 before 7.0.5 — fixed in 6.0.19, 7.0.5

How to fix

Upgrade to a fixed version: OISF suricata 6.0.19, 7.0.5. Check the vendor advisory for mitigations.

References

• https://github.com/OISF/suricata/commit/311002baf288a225f62cf18a90c5fdd294447379
• https://github.com/OISF/suricata/commit/d5ffecf11ad2c6fe89265e518f5d7443caf26ba4
• https://github.com/OISF/suricata/security/advisories/GHSA-79vh-hpwq-3jh7
• https://github.com/OISF/suricata/commit/311002baf288a225f62cf18a90c5fdd294447379
• https://github.com/OISF/suricata/commit/d5ffecf11ad2c6fe89265e518f5d7443caf26ba4
• https://github.com/OISF/suricata/security/advisories/GHSA-79vh-hpwq-3jh7

Get alerted when CVE-2024-32664 or the next vulnerability affects your stack