Oisf Suricata vulnerabilities

• oisf suricata Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected... CVE-2026-94084 Fix available 9.4 CriticalSeptember 20, 2026
• oisf suricata Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup... CVE-2026-94083 Fix available 9.4 CriticalSeptember 20, 2026
• oisf suricata Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state CVE-2026-71855 Fix available 5.9 MediumSeptember 18, 2026
• oisf suricata Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption CVE-2026-71418 Fix available 7.5 HighSeptember 18, 2026
• oisf suricata Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation CVE-2026-57223 Fix available 7.0 HighSeptember 18, 2026
• oisf suricata Suricata app-layer: passed flows can retain transactions, causing resource exhaustion CVE-2026-63446 Fix available 7.5 HighSeptember 18, 2026
• oisf suricata Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption CVE-2026-63447 Fix available 7.5 HighSeptember 18, 2026
• oisf suricata Suricata smb: some SMB flows can cause resource exhaustion CVE-2026-63448 Fix available 5.9 MediumSeptember 18, 2026
• oisf suricata Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading CVE-2026-57225 Fix available 3.3 LowSeptember 18, 2026
• oisf suricata Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption CVE-2026-63452 Fix available 7.5 HighSeptember 18, 2026
• oisf suricata Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load CVE-2026-63451 Fix available 3.3 LowSeptember 18, 2026
• oisf suricata Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection CVE-2026-63450 Fix available 3.7 LowSeptember 18, 2026
• oisf suricata Suricata sip: large SIP message bodies can evade detection with frame keyword CVE-2026-63449 Fix available 3.7 LowSeptember 18, 2026
• oisf suricata Suricata swf: heap buffer overflow in SWF decompression depth handling CVE-2026-57226 Fix available 3.7 LowSeptember 18, 2026
• oisf suricata Suricata lua/tls: null dereference in TlsGetCertInfo CVE-2026-45747 Fix available 7.5 HighSeptember 10, 2026
• oisf suricata Suricata smtp/mime: incomplete state reset allows detection bypass CVE-2026-57229 Fix available 5.3 MediumJuly 18, 2026
• oisf suricata Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder CVE-2026-57228 Fix available 8.2 HighJuly 18, 2026
• oisf suricata Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages CVE-2026-57227 Fix available 7.5 HighJuly 18, 2026
• oisf suricata Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion CVE-2026-57224 Fix available 6.5 MediumJuly 18, 2026
• oisf suricata Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6 CVE-2026-57222 Fix available 5.3 MediumJuly 18, 2026
• oisf suricata Suricata http2: decompression bomb can cause denial of service in Suricata CVE-2026-46387 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock CVE-2026-46352 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata lua: excessive flow variable registration can bypass sandbox CVE-2026-45770 Fix available 7.5 HighMay 28, 2026
• oisf suricata ikev2: unbounded client transform storage can lead to resource exhaustion CVE-2026-45769 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata ldap: unbounded responses per transaction can lead to resource exhaustion CVE-2026-45768 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata datasets: save to absolute filename can be bypassed when combined with load command CVE-2026-45767 Fix available 4.4 MediumMay 28, 2026
• oisf suricata Suricata nfs: unbounded stateful structures can lead to resource exhaustion CVE-2026-45766 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata dnp3: unbounded reassembly can lead to resource exhaustion CVE-2026-45765 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata http2: protocol-change type confusion can lead to denial of service CVE-2026-45764 Fix available 9.1 CriticalMay 28, 2026
• oisf suricata Suricata lua: sandbox allocation limit not enforced for new allocations CVE-2026-45763 Fix available 5.9 MediumMay 28, 2026
• oisf suricata Suricata defrag: missing address-family check can lead to remote crash CVE-2026-45762 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load CVE-2026-45761 Fix available 3.3 LowMay 28, 2026
• oisf suricata Suricata http1: quadratic Content-Disposition processing can lead to denial of service CVE-2026-45759 Fix available 7.5 HighMay 28, 2026
• oisf suricata Suricata detect/transform: use-after-free in decompress transforms CVE-2026-45752 Fix available 5.9 MediumMay 28, 2026
• oisf suricata Suricata detect/transform: use-after-free in dotprefix transform CVE-2026-45751 Fix available 5.9 MediumMay 28, 2026
• oisf suricata Suricata dcerpc: quadratic complexity in dcerpc buffering CVE-2026-31937 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata http2: unbounded resource consumption CVE-2026-31935 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata smtp/mine: quadratic complexity in extracting urls CVE-2026-31934 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata stream: quadratic complexity in stream inspection CVE-2026-31933 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata krb5: quadratic complexity in krb5 buffering CVE-2026-31932 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata tls: null dereference in tls.alpn rule keyword CVE-2026-31931 Fix available 7.5 HighMarch 27, 2026
• oisf suricata Suricata detect/alert: heap-use-after-free on alert queue expansion CVE-2026-22264 Fix available 7.4 HighJanuary 22, 2026
• oisf suricata Suricata http1: quadratic complexity in headers parsing over multiple packets CVE-2026-22263 Fix available 5.3 MediumJanuary 22, 2026
• oisf suricata Suricata datasets: stack overflow when saving a set CVE-2026-22262 Fix available 5.9 MediumJanuary 22, 2026
• oisf suricata Suricata eve/alert: http1 xff handling can lead to denial of service CVE-2026-22261 Fix available 3.7 LowJanuary 22, 2026
• oisf suricata Suricata http1: infinite recursion in decompression CVE-2026-22260 Fix available 7.5 HighJanuary 22, 2026
• oisf suricata Suricata dnp3: unbounded transaction growth CVE-2026-22259 Fix available 7.5 HighJanuary 22, 2026
• oisf suricata Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion CVE-2026-22258 Fix available 7.5 HighJanuary 22, 2026
• oisf suricata Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer CVE-2025-64344 Fix available 7.5 HighNovember 26, 2025
• oisf suricata Suricata is vulnerable to a heap buffer overflow on verdict CVE-2025-64330 Fix available 7.5 HighNovember 26, 2025
• Show olderLoading…