High
Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
Type: advisorySources: OSV
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2024-55628
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 4 Nov 2026, 04:43 UTC · Revision 1
Source evidence
Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
core-osv · Original sourcePublished 6 Jan 2025, 18:02 UTC
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.
osv:CVE-2024-55628
Complete source record
{
"id": "702bf7f2c9fca779fbf62bbffe97428b915bfffa36584c3ff60b48ee9f0e2e67",
"url": "https://osv.dev/vulnerability/CVE-2024-55628",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Suricata oversized resource names utilizing DNS name compression can lead to resource starvation",
"summary": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.",
"evidence": "osv:CVE-2024-55628",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2024-55628",
"aliases": [
"CVE-2024-55628",
"GHSA-96w4-jqwf-qx2j"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/oisf/suricata",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "97e69ffb1bc2b7358115ee59f460a924893664e8"
},
{
"fixed": "19cf0f81335d9f787d587450f7105ad95a648951"
},
{
"fixed": "37f4c52b22fcdde4adf9b479cb5700f89d00768d"
},
{
"fixed": "3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "7.0.8"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "19cf0f81335d9f787d587450f7105ad95a648951"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "37f4c52b22fcdde4adf9b479cb5700f89d00768d"
}
],
"source": "REFERENCES_COMMIT"
},
{
"range": [
{
"fixed": "3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"suricata-7.0.7",
"suricata-7.0.6",
"suricata-7.0.5",
"suricata-7.0.4",
"suricata-7.0.3",
"suricata-7.0.2",
"suricata-7.0.1",
"suricata-7.0.0",
"suricata-7.0.0-rc2",
"suricata-7.0.0-rc1",
"suricata-7.0.0-beta1",
"suricata-6.0.1",
"suricata-6.0.0",
"suricata-6.0.0-rc1",
"suricata-6.0.0-beta1",
"suricata-5.0.1",
"suricata-5.0.0",
"suricata-5.0.0-rc1",
"suricata-5.0.0-beta1",
"suricata-4.1.2",
"suricata-4.1.1",
"suricata-4.1.0",
"suricata-4.1.0-rc2",
"suricata-4.1.0-rc1",
"suricata-4.1.0-beta1",
"suricata-4.0.1",
"suricata-4.0.0",
"suricata-4.0.0-rc2",
"suricata-4.0.0-rc1",
"suricata-4.0.0-beta1",
"suricata-3.2.1",
"suricata-3.2",
"suricata-3.2RC1",
"suricata-3.2beta1",
"suricata-3.1.2",
"suricata-3.1.1",
"suricata-3.1",
"suricata-3.0.1",
"suricata-3.1RC1",
"suricata-3.0.1RC1",
"suricata-3.0",
"suricata-3.0RC3",
"suricata-3.0RC2",
"suricata-3.0RC1",
"suricata-2.1beta4",
"suricata-2.1beta3",
"suricata-2.1beta2",
"suricata-2.1beta1",
"suricata-2.0.2",
"suricata-2.0.1",
"suricata-2.0.1rc1",
"suricata-2.0",
"suricata-2.0rc3",
"suricata-2.0rc2",
"suricata-2.0rc1",
"suricata-2.0beta2",
"suricata-2.0beta1",
"suricata-1.4",
"suricata-1.4rc1",
"suricata-1.4beta3",
"suricata-1.4beta2",
"suricata-1.4beta1",
"suricata-1.3.1",
"suricata-1.3",
"suricata-1.3rc1",
"suricata-1.3beta2",
"suricata-1.3beta1",
"suricata-1.2.1",
"suricata-1.2",
"suricata-1.2rc1",
"suricata-1.2beta1",
"suricata-1.1",
"suricata-1.1rc1",
"suricata-1.1beta3",
"suricata-1.1beta2",
"suricata-1.1beta1",
"suricata-1.0.2",
"suricata-1.0.1",
"suricata-1.0.0",
"suricata-0.8.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-55628.json"
}
}
],
"modified": "2026-10-28T02:30:33.257128752Z",
"provider": "osv",
"references": [
"https://redmine.openinfosecfoundation.org/issues/7280",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55628.json",
"https://github.com/OISF/suricata/security/advisories/GHSA-96w4-jqwf-qx2j",
"https://nvd.nist.gov/vuln/detail/CVE-2024-55628",
"https://github.com/OISF/suricata/commit/19cf0f81335d9f787d587450f7105ad95a648951",
"https://github.com/OISF/suricata/commit/37f4c52b22fcdde4adf9b479cb5700f89d00768d",
"https://github.com/OISF/suricata/commit/3a5671739f5b25e5dd973a74ca5fd8ea40e1ae2d"
],
"provider_metadata": {
"cwe_ids": [
"CWE-405",
"CWE-779"
],
"cna_assigner": "GitHub_M",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55628.json"
}
},
"related_cves": [
{
"value": "CVE-2024-55628",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 500358,
"published_at": "2025-01-06T18:02:10.692+00:00"
}