Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

suricata

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, a logic error during fragment reassembly can lead to failed reassembly for valid traffic. An attacker could craft packets to trigger this behavior.This issue has been addressed in 7.0.7.

CVE-2024-45796 is a medium severity vulnerability classified as CWE-193 (Off-by-one Error) found in the Suricata network security monitoring engine developed by the Open Information Security Foundation (OISF). Suricata serves as an Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) tool widely used to analyze network traffic for malicious activity. Prior to version 7.0.7, Suricata contained a logic error in its fragment reassembly code. Specifically, an off-by-one error during the reassembly of fragmented IP packets could cause Suricata to fail to correctly reassemble valid traffic. This failure can lead to dropped or improperly inspected packets, allowing attackers to craft specially designed fragmented packets that evade detection or cause disruptions in traffic analysis. The vulnerability is remotely exploitable without requiring authentication or user interaction, as it involves network packet processing. The impact is primarily on the integrity of Suricata's inspection capabilities, potentially allowing malicious payloads to bypass detection. Availability is not directly impacted, and confidentiality remains unaffected. The issue was addressed and fixed in Suricata version 7.0.7. The CVSS v3.1 base score is 5.3, reflecting a medium severity level due to the ease of exploitation and the potential for attackers to bypass security monitoring. No public exploits or active exploitation in the wild have been reported to date.

Detailed information about CVE-2024-45796: CWE-193: Off-by-one Error in OISF suricata affecting OISF suricata. Get real-time updates, technical details, and mit

CVE-2024-45796: CWE-193: Off-by-one Error in OISF suricata - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2024-45796: CWE-193: Off-by-one Error in OISF suricata

Threats Tagged 'cve-2024-45796'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2024-45796'

Lead Pen Test Professional