{"id":"CVE-2024-23836","summary":"crafted traffic can cause denial of service","details":"Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 6.0.16 and 7.0.3, an attacker can craft traffic to cause Suricata to use far more CPU and memory for processing the traffic than needed, which can lead to extreme slow downs and denial of service.  This vulnerability is patched in 6.0.16 or 7.0.3.  Workarounds include disabling the affected protocol app-layer parser in the yaml and reducing the `stream.reassembly.depth` value helps reduce the severity of the issue.","aliases":["GHSA-q33q-45cr-3cpc"],"modified":"2026-08-12T15:15:02.413377Z","published":"2024-02-26T15:44:03.308Z","related":["openSUSE-SU-2025:15394-1"],"database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-770"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json"},"references":[{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GOCOBFUTIFHOP2PZOH4ENRFXRBHIRKK4/"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXJIT7R53ZXROO3I256RFUWTIW4ECK6P/"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6531"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6532"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6540"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6658"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6659"},{"type":"WEB","url":"https://redmine.openinfosecfoundation.org/issues/6660"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23836.json"},{"type":"ADVISORY","url":"https://github.com/OISF/suricata/security/advisories/GHSA-q33q-45cr-3cpc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23836"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/b1549e930f6426eeff43f12b672337cbcda566b8"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/ce9b90326949c94a46611d6394e28600ee5e8bd5"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01"},{"type":"FIX","url":"https://github.com/OISF/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/oisf/suricata","events":[{"introduced":"0"},{"fixed":"b46ffaaf430faa0a5a46915e223a49f06847b523"},{"introduced":"21ec99aa76cc5406007ce12a4891f2eaedb02291"},{"fixed":"be68bbc4ab288ec84d2fe5e0737ace17ab74ef26"},{"fixed":"18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"fixed":"2a2120ecf10c5b5713ec2bf59469fe57f7b5b747"},{"fixed":"83c5567ea7b0b28376f57dcfee9c6301448c7bc7"},{"fixed":"8efaebe293e2a74c8e323fa85a6f5fadf82801bc"},{"fixed":"97953998d2d60673ed6c30ddfb6a2d59b4230f97"},{"fixed":"b1549e930f6426eeff43f12b672337cbcda566b8"},{"fixed":"cd035d59e3df157b606f4fe67324ea8e437be786"},{"fixed":"ce9b90326949c94a46611d6394e28600ee5e8bd5"},{"fixed":"e7e28822f473320658d6125f16ac3f0524baff01"},{"fixed":"f9de1cca6182e571f1c02387dca6e695e55608af"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"6.0.16"},{"introduced":"7.0.0"},{"fixed":"7.0.3"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*"}}],"versions":["suricata-6.0.15","suricata-7.0.2","suricata-7.0.1","suricata-6.0.14","suricata-7.0.0","suricata-6.0.13","suricata-6.0.12","suricata-6.0.11","suricata-6.0.10","suricata-6.0.9","suricata-6.0.8","suricata-6.0.7","suricata-6.0.6","suricata-6.0.5","suricata-6.0.4","suricata-6.0.3","suricata-6.0.2","suricata-6.0.1","suricata-6.0.0","suricata-6.0.0-rc1","suricata-6.0.0-beta1","suricata-5.0.1","suricata-5.0.0","suricata-5.0.0-rc1","suricata-5.0.0-beta1","suricata-4.1.2","suricata-4.1.1","suricata-4.1.0","suricata-4.1.0-rc2","suricata-4.1.0-rc1","suricata-4.1.0-beta1","suricata-4.0.1","suricata-4.0.0","suricata-4.0.0-rc2","suricata-4.0.0-rc1","suricata-4.0.0-beta1","suricata-3.2.1","suricata-3.2","suricata-3.2RC1","suricata-3.2beta1","suricata-3.1.2","suricata-3.1.1","suricata-3.1","suricata-3.0.1","suricata-3.1RC1","suricata-3.0.1RC1","suricata-3.0","suricata-3.0RC3","suricata-3.0RC2","suricata-3.0RC1","suricata-2.1beta4","suricata-2.1beta3","suricata-2.1beta2","suricata-2.1beta1","suricata-2.0.2","suricata-2.0.1","suricata-2.0.1rc1","suricata-2.0","suricata-2.0rc3","suricata-2.0rc2","suricata-2.0rc1","suricata-2.0beta2","suricata-2.0beta1","suricata-1.4","suricata-1.4rc1","suricata-1.4beta3","suricata-1.4beta2","suricata-1.4beta1","suricata-1.3.1","suricata-1.3","suricata-1.3rc1","suricata-1.3beta2","suricata-1.3beta1","suricata-1.2.1","suricata-1.2","suricata-1.2rc1","suricata-1.2beta1","suricata-1.1","suricata-1.1rc1","suricata-1.1beta3","suricata-1.1beta2","suricata-1.1beta1","suricata-1.0.2","suricata-1.0.1","suricata-1.0.0","suricata-0.8.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-23836.json","vanir_signatures_modified":"2026-08-12T15:15:02Z","vanir_signatures":[{"deprecated":false,"digest":{"line_hashes":["142965960444259777980657061985131953153","334089494406313947230449544387621260512","59302461598992136276812400541430404174","330827458261244608304424435599796251513"],"threshold":0.9},"id":"CVE-2024-23836-01acb911","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp.h"}},{"target":{"function":"HTPStateGetTx","file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"function_hash":"243892228198007358467473396691810736320","length":212},"id":"CVE-2024-23836-090b6014","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"digest":{"line_hashes":["137049373676718174382939566488712482303","151643537324946202333824767035916334300","236009724686673921688395788700012421525","174322552201852452877815088220683200805","265903176875314924689059777264702965442","138317786642350758453998198212282134267","52345714450084337919592551151320680589","53592312427592814529459801723424496825","271137533763551250403362007713755575640","200196121085283089393543218125493229360","239775717608517071228278313967951255442","103559075425107966315662743843910529673","181548146012205622745039073447705820580","271339392593565164430657629041727765891","244406995531428940365610245025065456808","126482496821901726938159346717084475448","133374585880698295692504999337723706010","135954345712668162126943166562530153365","162638859666865359111400240637486485653","231126592163839487962747090023145360984","255083707275259510914396490637449571848","101535884137540134904202785408205270773","96608217442015194370531440191200719057","112354383118539740281184955022226617829","323692320223321698219500502213113846954","44506996497357158743544518471363968856","237521536765811066142243557935715500105","103559075425107966315662743843910529673","181548146012205622745039073447705820580","271339392593565164430657629041727765891","244406995531428940365610245025065456808","221853900948107252894612101255164481602","174254827168122887612279310433911113004","333205812941909832341350545118556983481","72045713593165015724483807349611108600","187201613174374222245750421053931308975","323818083163146997948520466577529191604","235224638663192135784238079324904783736"],"threshold":0.9},"id":"CVE-2024-23836-0f117573","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/cd035d59e3df157b606f4fe67324ea8e437be786","target":{"file":"src/app-layer-smtp.c"},"deprecated":false},{"digest":{"function_hash":"245155159312249163782230388372605484347","length":201},"id":"CVE-2024-23836-149f3128","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"file":"src/app-layer-smtp.c","function":"SMTPTransactionCreate"},"deprecated":false},{"digest":{"function_hash":"158823291001613194088416643213041716029","length":571},"id":"CVE-2024-23836-1806c35b","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7","target":{"function":"HTPStateTransactionFree","file":"src/app-layer-htp.c"},"deprecated":false},{"target":{"file":"src/app-layer-smtp.c"},"deprecated":false,"digest":{"line_hashes":["137049373676718174382939566488712482303","151643537324946202333824767035916334300","22571442745458347264105703841534224531","9915768219515022595628378570240303343","108139769445448211961721579493136956763","223701580821989032212243343582910804992","156099373602176148386195554171497666717","20501147937046459696522264926284734386","151140315150343559444819253757858205482","242874922714239522436025547135450853658","249791162624582665150931301412318000897","92712815500775094644090099001635160094","225182362778810931507267119318436121123","338283251350412212059256062515379078560","324659228540535151829882801647465079326","77843563150502313691943007194824404552","321740120663255498665344308138480066592","103559075425107966315662743843910529673","181548146012205622745039073447705820580","271339392593565164430657629041727765891","244406995531428940365610245025065456808","186646859484571025083094100263017469798","8009437286865721878507160764917616288","120272771379210188897452231349733546013","88543400513126799830075384550939001998","96608217442015194370531440191200719057","112354383118539740281184955022226617829","323692320223321698219500502213113846954","44506996497357158743544518471363968856","237521536765811066142243557935715500105","103559075425107966315662743843910529673","181548146012205622745039073447705820580","271339392593565164430657629041727765891","244406995531428940365610245025065456808","221853900948107252894612101255164481602","174254827168122887612279310433911113004","333205812941909832341350545118556983481","72045713593165015724483807349611108600","187201613174374222245750421053931308975","323818083163146997948520466577529191604","235224638663192135784238079324904783736"],"threshold":0.9},"id":"CVE-2024-23836-21193d6c","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7"},{"source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp.c","function":"HTPStateGetTxCnt"},"deprecated":false,"digest":{"function_hash":"26180364270848667295417968039877165340","length":310},"id":"CVE-2024-23836-25299f6b","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"309264542332198854519262324369081851448","length":350},"id":"CVE-2024-23836-2d75a97a","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"file":"src/app-layer-smtp.c","function":"SMTPTestInitConfig"}},{"deprecated":false,"digest":{"function_hash":"254063556785950435532704909935735581258","length":266},"id":"CVE-2024-23836-3361368f","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp.c","function":"HtpGetTxForH2"}},{"target":{"function":"HtpGetTxForH2","file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"length":266,"function_hash":"254063556785950435532704909935735581258"},"id":"CVE-2024-23836-41a7957b","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"file":"src/app-layer-smtp.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["10891644772758866330537517117764025017","180465324844771297749356363923557253795","5105344262610379499674715265656299153","232409278706822341342786315567319883087"]},"id":"CVE-2024-23836-53fd9f24","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"61383696148796309381203908828575058674","length":1611},"id":"CVE-2024-23836-54570897","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp-file.c","function":"HTPFileOpenWithRange"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc","target":{"file":"src/app-layer-htp.c","function":"HTPConfigSetDefaultsPhase1"},"deprecated":false,"digest":{"function_hash":"320877002617205553126724279874433499031","length":2126},"id":"CVE-2024-23836-69889c56"},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","target":{"file":"src/app-layer-smtp.c","function":"SMTPTestInitConfig"},"deprecated":false,"digest":{"function_hash":"309264542332198854519262324369081851448","length":350},"id":"CVE-2024-23836-70a0ed56","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"function":"SMTPConfigure","file":"src/app-layer-smtp.c"},"deprecated":false,"digest":{"function_hash":"204248349273619338413394827909218114195","length":2606},"id":"CVE-2024-23836-744a00c7","signature_type":"Function"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/8efaebe293e2a74c8e323fa85a6f5fadf82801bc","target":{"file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"line_hashes":["299509311138843161022317290790441108696","311972976800963529997680457401956367121","266993071760787270538100770673583366530","84682579873549277713246004004961722056"],"threshold":0.9},"id":"CVE-2024-23836-78682ac8"},{"source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp.c","function":"HTPStateFree"},"deprecated":false,"digest":{"length":781,"function_hash":"24117344876752183218856800440311055335"},"id":"CVE-2024-23836-799f065b","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"file":"src/app-layer-smtp.c"},"deprecated":false,"digest":{"line_hashes":["139945223516397017607421173607565172337","339132615478630641298901507823675235316","130382102345232862642389302716311083326","178336897550272958362052577814103448782","130783527017302505742529513689455428678","262581420254067569627651767268025074618","154130662891791189032688439354856208298","71034535686723760540381815184322249847","114208467314301834525759722786178279824","51516155183935135172680973897114972234","279882952370202367569293903365455051671","316554480187499989086617325239265991501","105319930071548432039452927939691832058","282601593264788219552511100400160516910","330270462857982730193206865513282537841","206846521749310547292432984507865993410","117874963655504996014069190961583426617","113491280092439552750717773283926048328","252830269144635906827145423808250699159","264029848119126896102517590302031018784","231562176627936475954471014387329790028","157192408021345393398928924759746232505","252830269144635906827145423808250699159","241928236759658868689811179614152949037","167409815977555962962048844741665833369","298466854824387276685267009896891988561","252830269144635906827145423808250699159","226269214460819851687256877054480288369","296883514284883801235209989597306114160","183011478701914802458150497234584320809"],"threshold":0.9},"id":"CVE-2024-23836-7dba96af"},{"deprecated":false,"digest":{"line_hashes":["141433290095762263785255434815291538180","34956949237258845524208330966218559552","134159909941918645855288432834476395667","71034535686723760540381815184322249847","114208467314301834525759722786178279824","51516155183935135172680973897114972234","279882952370202367569293903365455051671","316554480187499989086617325239265991501","105319930071548432039452927939691832058","282601593264788219552511100400160516910","330270462857982730193206865513282537841","253435108329354393010551112518853808207","80429257842489472296182883802547018245","175372089083673668070744619132333194740","252830269144635906827145423808250699159","183031937814784095795559968736203442063","102854599400086241616931669244503935675","329738223452946629065697232096701795008","252830269144635906827145423808250699159","241928236759658868689811179614152949037","167409815977555962962048844741665833369","298466854824387276685267009896891988561","252830269144635906827145423808250699159","226269214460819851687256877054480288369","296883514284883801235209989597306114160","183011478701914802458150497234584320809"],"threshold":0.9},"id":"CVE-2024-23836-857db284","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","target":{"file":"src/app-layer-smtp.c"}},{"id":"CVE-2024-23836-88557a62","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01","target":{"file":"src/app-layer-htp.c","function":"HTPConfigParseParameters"},"deprecated":false,"digest":{"function_hash":"272277624454094244114715962605331889535","length":12723}},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/83c5567ea7b0b28376f57dcfee9c6301448c7bc7","target":{"file":"src/app-layer-smtp.c","function":"SMTPProcessRequest"},"deprecated":false,"digest":{"function_hash":"259810795710132886135223502318593422712","length":4563},"id":"CVE-2024-23836-8e34b379","signature_type":"Function"},{"target":{"file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"line_hashes":["240589125229066343246188374563545965611","98124072970306688102509533143343878331","42513232489016626179436472718860550470","252323537165201482361721471147467347134","86965694108221057006142273389633928464","143855230026898913828053400971181876271","236253174543934842372621151088059381514","185023427287647637911217727198933203609","304999915418286377752201603223790441707","33248083054525452875825132290514952960","159270159887354093691822027692135055763","255068300219709218216386645812516256803","249683987586465287739887723482022757963","15387000452187747277039147970393198191","14297880121792594207567382753865729956","156209593748271507731837150540412976712","32153688502152801836905363948647021754","206574163084185765810097016661747889129","296712387542131854993233003284501294593","168986740870092147437450018302422918518","254311039997283154284121231098502190837","255247455016159952654122021322466883228","23528910748069986506098611209682608866","314499620826626740581317792796617976894","131615163824617104197413902018885136272"],"threshold":0.9},"id":"CVE-2024-23836-93086fdc","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"target":{"file":"src/app-layer-htp.c","function":"HTPStateTransactionFree"},"deprecated":false,"digest":{"function_hash":"158823291001613194088416643213041716029","length":571},"id":"CVE-2024-23836-ab720a91","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","target":{"file":"src/app-layer-smtp.h"},"deprecated":false,"digest":{"line_hashes":["10891644772758866330537517117764025017","309873508900550072156893961179968545583","65884787851779765794152481915297061150","107802156131708482607519278004693370165"],"threshold":0.9},"id":"CVE-2024-23836-c21d7b55"},{"target":{"file":"src/app-layer-smtp.c","function":"SMTPTransactionCreate"},"deprecated":false,"digest":{"function_hash":"154224814782857314575260735793772502375","length":246},"id":"CVE-2024-23836-d40ad639","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af"},{"target":{"file":"src/app-layer-htp.c","function":"HTPStateFree"},"deprecated":false,"digest":{"function_hash":"4523393365341125010076459311479126133","length":843},"id":"CVE-2024-23836-da2b57de","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7"},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01","target":{"file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"line_hashes":["299509311138843161022317290790441108696","311972976800963529997680457401956367121","266993071760787270538100770673583366530","84682579873549277713246004004961722056","337442609328826373024611146974701954908","314393082021152846806214160872789852994","24446057498206078990989096604959233841","182743217158196361948456174747146763685"],"threshold":0.9},"id":"CVE-2024-23836-e1b5d5b0","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","target":{"file":"src/app-layer-smtp.c","function":"SMTPProcessRequest"},"deprecated":false,"digest":{"function_hash":"55113618231482298865971097204781013735","length":4277},"id":"CVE-2024-23836-e305be2b","signature_type":"Function"},{"source":"https://github.com/oisf/suricata/commit/f9de1cca6182e571f1c02387dca6e695e55608af","target":{"file":"src/app-layer-smtp.c","function":"SMTPConfigure"},"deprecated":false,"digest":{"length":3718,"function_hash":"116518533822609553237543536939666416513"},"id":"CVE-2024-23836-e573b8ef","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"333552387008907864388900327890951773061","length":2174},"id":"CVE-2024-23836-e7270574","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/e7e28822f473320658d6125f16ac3f0524baff01","target":{"file":"src/app-layer-htp.c","function":"HTPConfigSetDefaultsPhase1"},"deprecated":false},{"target":{"file":"src/app-layer-htp.c"},"deprecated":false,"digest":{"line_hashes":["240589125229066343246188374563545965611","98124072970306688102509533143343878331","42513232489016626179436472718860550470","252323537165201482361721471147467347134","86965694108221057006142273389633928464","143855230026898913828053400971181876271","236253174543934842372621151088059381514","185023427287647637911217727198933203609","304999915418286377752201603223790441707","33248083054525452875825132290514952960","159270159887354093691822027692135055763","255068300219709218216386645812516256803","249683987586465287739887723482022757963","15387000452187747277039147970393198191","14297880121792594207567382753865729956","156209593748271507731837150540412976712","32153688502152801836905363948647021754","206574163084185765810097016661747889129","296712387542131854993233003284501294593","168986740870092147437450018302422918518","254311039997283154284121231098502190837","255247455016159952654122021322466883228","23528910748069986506098611209682608866","314499620826626740581317792796617976894","131615163824617104197413902018885136272"],"threshold":0.9},"id":"CVE-2024-23836-e76efd1a","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97"},{"digest":{"line_hashes":["134539991125351701412488136581911443142","186841425515541566477027582447095310166","134541868353138801356369707921603960798","111417919650666129998244544387568578030"],"threshold":0.9},"id":"CVE-2024-23836-e97c1e99","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp-file.c"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["323511965521348221591460317987515668857","251343097821914443075390064079128047896","95304475395963602093700718739080709745","60873453182030635016553309957166000762"],"threshold":0.9},"id":"CVE-2024-23836-eca94095","signature_type":"Line","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7","target":{"file":"src/app-layer-htp.h"}},{"signature_version":"v1","source":"https://github.com/oisf/suricata/commit/97953998d2d60673ed6c30ddfb6a2d59b4230f97","target":{"file":"src/app-layer-htp.c","function":"HTPStateGetTx"},"deprecated":false,"digest":{"function_hash":"243892228198007358467473396691810736320","length":212},"id":"CVE-2024-23836-eec81af7","signature_type":"Function"},{"digest":{"function_hash":"330369530905758532659799231646600929320","length":4545},"id":"CVE-2024-23836-f2787150","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/2a2120ecf10c5b5713ec2bf59469fe57f7b5b747","target":{"function":"SMTPProcessRequest","file":"src/app-layer-smtp.c"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"26180364270848667295417968039877165340","length":310},"id":"CVE-2024-23836-f9442309","signature_type":"Function","signature_version":"v1","source":"https://github.com/oisf/suricata/commit/18841a58da71e735ddf4e52cbfa6989755ecbeb7","target":{"file":"src/app-layer-htp.c","function":"HTPStateGetTxCnt"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}