Debian trixie
Source: Debian Security Tracker
suricata→ fixed in1:7.0.7-1urgency: not yet assignedsudo apt-get install --only-upgrade -y suricata
Back to CVE digest
CVE-2024-47187 · cross-distro fix matrix
CVE-2024-47187: Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.7, missing initialization of the random seed for "thash" leads to datasets having predictable hash table behavior. This can lead to dataset file loading to use e
Affects 4 Linux releases across 4 (distro × package) combinations.
Fix per ecosystem
Each block below is a distro release where CVE-2024-47187 has a known fix. Run the listed command on that distro to remediate.
Alpine v3.20
Source: Alpine secdb
suricata→ fixed in7.0.7-r0apk update && apk add --upgrade suricata
Alpine v3.21
Source: Alpine secdb
suricata→ fixed in7.0.7-r0apk update && apk add --upgrade suricata
Alpine edge
Source: Alpine secdb
suricata→ fixed in7.0.7-r0apk update && apk add --upgrade suricata
Are YOU affected by CVE-2024-47187?
5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.
curl https://mindsparkstack.com/scan.sh | bash
Continuous monitoring beats manual checking
CVE-2024-47187dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.
See StackPatch ($99 lifetime)