Skip to contentOisf Suricata vulnerabilities
- oisf suricataSuricata is vulnerable to a stack overflow on large file transfers with http-body-printableCVE-2025-64331Fix available7.5 High
- oisf suricataSuricata is vulnerable to a stack overflow on larger compressed dataCVE-2025-64332Fix available7.5 High
- oisf suricataSuricata is vulnerable to a stack overflow from big content-typeCVE-2025-64333Fix available7.5 High
- oisf suricataSuricata is vulnerable to a null deref when used with base64_dataCVE-2025-64335Fix available7.5 High
- oisf suricataSuricata is vulnerable to unbounded memory growth for decompressionCVE-2025-64334Fix available7.5 High
- oisf suricataSuricata: Keyword tls.subjectaltname can lead to NULL-ptr derefCVE-2025-59150Fix available7.5 High
- oisf suricataSuricata: Stack buffer overflow in rule parser when processing long keywords with transformsCVE-2025-59149Fix available6.2 Medium
- oisf suricataSuricata's improper use of entropy keyword can lead to a NULL-ptr derefCVE-2025-59148Fix available7.5 High
- oisf suricataSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN PacketsCVE-2025-59147Fix available7.5 High
- oisf suricataSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvationCVE-2025-53538Fix available7.5 High
- oisf suricataSuricata decode_base64: signature can do large memory allocationCVE-2025-29917Fix available6.2 Medium
- oisf suricataSuricata datasets: ruleset declared settings can lead to resource starvationCVE-2025-29916Fix available6.2 Medium
- oisf suricataSuricata af-packet: defrag option can lead to truncated packets affecting visibilityCVE-2025-29915Fix available7.5 High
- oisf suricataSuricata pcre: negated pcr can cause infinite loopCVE-2025-29918Fix available6.2 Medium
- oisf suricataSuricata generic detection bypass using TCP urgent supportCVE-2024-55629Fix available7.5 High
- oisf suricataSuricata oversized resource names utilizing DNS name compression can lead to resource starvationCVE-2024-55628Fix available7.5 High
- oisf suricataSuricata segfault on StreamingBufferSlideToOffsetWithRegionsCVE-2024-55627Fix available5.9 Medium
- oisf suricataSuricata oversized bpf file can lead to buffer overflowCVE-2024-55626Fix available3.3 Low
- oisf suricataSuricata allows stack overflow in transformsCVE-2024-55605Fix available7.5 High
- oisf suricataSuricata ja4: invalid alpn leads to panicCVE-2024-47522Fix available7.5 High
- oisf suricataSuricata http/byte-ranges: missing hashtable random seed leads to potential DoSCVE-2024-47188Fix available7.5 High
- oisf suricataSuricata datasets: missing hashtable random seed leads to potential DoSCVE-2024-47187Fix available7.5 High
- oisf suricataSuricata defrag: off by one can lead to policy bypassCVE-2024-45796Fix available5.3 Medium
- oisf suricataSuricata detect/datasets: reachable assertion with unimplemented rule optionCVE-2024-45795Fix available7.5 High
- oisf suricataSuricata http/range: NULL-ptr deref when http.memcap is reachedCVE-2024-38536Fix available7.5 High
- oisf suricataSuricata http2: oom from duplicate headersCVE-2024-38535Fix available7.5 High
- oisf suricataSuricata modbus: txs without responses are never freedCVE-2024-38534Fix available7.5 High
- oisf suricataSuricata defrag: IP ID reuse can lead to policy bypassCVE-2024-37151Fix available5.3 Medium
- oisf suricataSuricata's defrag contains various issues leading to policy bypassCVE-2024-32867Fix available5.3 Medium
- oisf suricataSuricata's base64 contains an out of bounds writeCVE-2024-32664Fix available5.3 Medium
- oisf suricataSuricata 's http2 parser contains an improper compressed header handling can lead to resource starvationCVE-2024-32663Fix available7.5 High
- oisf suricataSuricata uses excessive resource use in malformed ssh traffic parsingCVE-2024-28870Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata http2: header handling evasionCVE-2024-24568Fix available5.3 Medium
- oisf suricata, fedoraproject fedora +1 moreSuricata http: heap use after free with http.request_header and http.response_header keywordsCVE-2024-23839Fix available7.1 High
- oisf suricata, fedoraproject fedora +1 morecrafted traffic can cause denial of serviceCVE-2024-23836Fix available7.5 High
- oisf suricata, fedoraproject fedora +1 moreSuricata's pgsql: memory exhaustion use on record parsingCVE-2024-23835Fix available7.5 High
- oisf suricataIn Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able...CVE-2023-35853Fix available9.8 Critical
- oisf suricataIn Suricata before 6.0.13 (when there is an adversary who controls an external source of rules),...CVE-2023-35852Fix available7.5 High
- oisf suricata, pfsense, pfsense suricata package +2 moreDirectory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0...CVE-2020-196787.5 High
- oisf suricata, debian linux +1 moreAn issue was discovered in Suricata before 6.0.4. It is possible to bypass/evade any HTTP-based...CVE-2021-45098Fix available7.5 High
- oisf suricataSuricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP...CVE-2021-37592Fix available9.8 Critical
- oisf suricata, debian linux, fedoraproject fedora +2 moreSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."CVE-2021-35063Fix available7.5 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It was possible to bypass/evade any tcp based...CVE-2019-18625Fix available7.5 High
- debian linux, oisf suricata +1 moreAn issue was discovered in Suricata 5.0.0. It is possible to bypass/evade any tcp based signature...CVE-2019-18792Fix available9.1 Critical
- oisf suricataOpen Information Security Foundation Suricata prior to version 4.1.3 is affected by: Denial of...CVE-2019-1010279Fix available7.5 High
- oisf suricataOpen Information Security Foundation Suricata prior to version 4.1.2 is affected by: Denial of...CVE-2019-1010251Fix available7.5 High
- oisf suricataA buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the...CVE-2019-10050Fix available7.5 High
- oisf suricataSuricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU. A malformed PDU can...CVE-2018-10244Fix available9.8 Critical
- oisf suricata, debian linux +1 moreSuricata version 4.0.4 incorrectly handles the parsing of the SSH banner. A malformed SSH banner...CVE-2018-10242Fix available7.5 High
- oisf suricata-updateOISF suricata-update unsafely deserializes YAML dataCVE-2018-1000167Fix available7.8 High
- Show moreLoading…