# OISF Suricata.

Every CVE that names OISF Suricata among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Use after free in OISF Suricata](https://agentprime.io/advisories/CVE-2026-94084.md)
  `CVE-2026-94084` · CVE record: OISF Suricata · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [Type confusion in OISF Suricata](https://agentprime.io/advisories/CVE-2026-94083.md)
  `CVE-2026-94083` · CVE record: OISF Suricata · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Sept 2026 · Tags: Memory corruption
- [Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state](https://agentprime.io/advisories/CVE-2026-71855.md)
  `CVE-2026-71855` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-697
- [Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption](https://agentprime.io/advisories/CVE-2026-71418.md)
  `CVE-2026-71418` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation](https://agentprime.io/advisories/CVE-2026-57223.md)
  `CVE-2026-57223` · CVE record: OISF suricata · CVSS 7.0 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-428
- [Suricata app-layer: passed flows can retain transactions, causing resource exhaustion](https://agentprime.io/advisories/CVE-2026-63446.md)
  `CVE-2026-63446` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption](https://agentprime.io/advisories/CVE-2026-63447.md)
  `CVE-2026-63447` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata smb: some SMB flows can cause resource exhaustion](https://agentprime.io/advisories/CVE-2026-63448.md)
  `CVE-2026-63448` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata smtp/mime: incomplete state reset allows detection bypass](https://agentprime.io/advisories/CVE-2026-57229.md)
  `CVE-2026-57229` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-665
- [Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading](https://agentprime.io/advisories/CVE-2026-57225.md)
  `CVE-2026-57225` · CVE record: OISF suricata · CVSS 3.3 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption](https://agentprime.io/advisories/CVE-2026-63452.md)
  `CVE-2026-63452` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service, CWE-409
- [Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load](https://agentprime.io/advisories/CVE-2026-63451.md)
  `CVE-2026-63451` · CVE record: OISF suricata · CVSS 3.3 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages](https://agentprime.io/advisories/CVE-2026-57227.md)
  `CVE-2026-57227` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection](https://agentprime.io/advisories/CVE-2026-63450.md)
  `CVE-2026-63450` · CVE record: OISF suricata · CVSS 3.7 Low · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-755
- [Suricata sip: large SIP message bodies can evade detection with frame keyword](https://agentprime.io/advisories/CVE-2026-63449.md)
  `CVE-2026-63449` · CVE record: OISF suricata · CVSS 3.7 Low · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-197
- [Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder](https://agentprime.io/advisories/CVE-2026-57228.md)
  `CVE-2026-57228` · CVE record: OISF suricata · CVSS 8.2 High · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-57224.md)
  `CVE-2026-57224` · CVE record: OISF suricata · CVSS 6.5 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Denial of service
- [Suricata swf: heap buffer overflow in SWF decompression depth handling](https://agentprime.io/advisories/CVE-2026-57226.md)
  `CVE-2026-57226` · CVE record: OISF suricata · CVSS 3.7 Low · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6](https://agentprime.io/advisories/CVE-2026-57222.md)
  `CVE-2026-57222` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-697
- [Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock](https://agentprime.io/advisories/CVE-2026-46352.md)
  `CVE-2026-46352` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service
- [Suricata lua: excessive flow variable registration can bypass sandbox](https://agentprime.io/advisories/CVE-2026-45770.md)
  `CVE-2026-45770` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption, CWE-693
- [ikev2: unbounded client transform storage can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45769.md)
  `CVE-2026-45769` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata ldap: unbounded responses per transaction can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45768.md)
  `CVE-2026-45768` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata datasets: save to absolute filename can be bypassed when combined with load command](https://agentprime.io/advisories/CVE-2026-45767.md)
  `CVE-2026-45767` · CVE record: OISF suricata · CVSS 4.4 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal
- [Suricata nfs: unbounded stateful structures can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45766.md)
  `CVE-2026-45766` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata dnp3: unbounded reassembly can lead to resource exhaustion](https://agentprime.io/advisories/CVE-2026-45765.md)
  `CVE-2026-45765` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata http2: protocol-change type confusion can lead to denial of service](https://agentprime.io/advisories/CVE-2026-45764.md)
  `CVE-2026-45764` · CVE record: OISF suricata · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata defrag: missing address-family check can lead to remote crash](https://agentprime.io/advisories/CVE-2026-45762.md)
  `CVE-2026-45762` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load](https://agentprime.io/advisories/CVE-2026-45761.md)
  `CVE-2026-45761` · CVE record: OISF suricata · CVSS 3.3 Low · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata http1: quadratic Content-Disposition processing can lead to denial of service](https://agentprime.io/advisories/CVE-2026-45759.md)
  `CVE-2026-45759` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata detect/transform: use-after-free in decompress transforms](https://agentprime.io/advisories/CVE-2026-45752.md)
  `CVE-2026-45752` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata detect/transform: use-after-free in dotprefix transform](https://agentprime.io/advisories/CVE-2026-45751.md)
  `CVE-2026-45751` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata lua/tls: null dereference in TlsGetCertInfo](https://agentprime.io/advisories/CVE-2026-45747.md)
  `CVE-2026-45747` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption
- [Suricata http2: decompression bomb can cause denial of service in Suricata](https://agentprime.io/advisories/CVE-2026-46387.md)
  `CVE-2026-46387` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-409
- [Suricata lua: sandbox allocation limit not enforced for new allocations](https://agentprime.io/advisories/CVE-2026-45763.md)
  `CVE-2026-45763` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: Denial of service
- [Suricata dcerpc: quadratic complexity in dcerpc buffering](https://agentprime.io/advisories/CVE-2026-31937.md)
  `CVE-2026-31937` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Suricata http2: unbounded resource consumption](https://agentprime.io/advisories/CVE-2026-31935.md)
  `CVE-2026-31935` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Suricata smtp/mine: quadratic complexity in extracting urls](https://agentprime.io/advisories/CVE-2026-31934.md)
  `CVE-2026-31934` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Suricata stream: quadratic complexity in stream inspection](https://agentprime.io/advisories/CVE-2026-31933.md)
  `CVE-2026-31933` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Suricata krb5: quadratic complexity in krb5 buffering](https://agentprime.io/advisories/CVE-2026-31932.md)
  `CVE-2026-31932` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Denial of service
- [Suricata tls: null dereference in tls.alpn rule keyword](https://agentprime.io/advisories/CVE-2026-31931.md)
  `CVE-2026-31931` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 2 Apr 2026 · Tags: Memory corruption
- [Suricata detect/alert: heap-use-after-free on alert queue expansion](https://agentprime.io/advisories/CVE-2026-22264.md)
  `CVE-2026-22264` · CVE record: OISF suricata · CVSS 7.4 High · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Suricata http1: quadratic complexity in headers parsing over multiple packets](https://agentprime.io/advisories/CVE-2026-22263.md)
  `CVE-2026-22263` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-1050
- [Suricata datasets: stack overflow when saving a set](https://agentprime.io/advisories/CVE-2026-22262.md)
  `CVE-2026-22262` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 27 Jan 2026 · Tags: Memory corruption
- [Suricata eve/alert: http1 xff handling can lead to denial of service](https://agentprime.io/advisories/CVE-2026-22261.md)
  `CVE-2026-22261` · CVE record: OISF suricata · CVSS 3.7 Low · Not analysed yet · Published 27 Jan 2026 · Tags: CWE-1050
- [Suricata http1: infinite recursion in decompression](https://agentprime.io/advisories/CVE-2026-22260.md)
  `CVE-2026-22260` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: Denial of service
- [Suricata dnp3: unbounded transaction growth](https://agentprime.io/advisories/CVE-2026-22259.md)
  `CVE-2026-22259` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: Denial of service
- [Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion](https://agentprime.io/advisories/CVE-2026-22258.md)
  `CVE-2026-22258` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 27 Jan 2026 · Tags: Denial of service
- [Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer](https://agentprime.io/advisories/CVE-2025-64344.md)
  `CVE-2025-64344` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to a heap buffer overflow on verdict](https://agentprime.io/advisories/CVE-2025-64330.md)
  `CVE-2025-64330` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable](https://agentprime.io/advisories/CVE-2025-64331.md)
  `CVE-2025-64331` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to a stack overflow on larger compressed data](https://agentprime.io/advisories/CVE-2025-64332.md)
  `CVE-2025-64332` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to a stack overflow from big content-type](https://agentprime.io/advisories/CVE-2025-64333.md)
  `CVE-2025-64333` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to a null deref when used with base64_data](https://agentprime.io/advisories/CVE-2025-64335.md)
  `CVE-2025-64335` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Memory corruption
- [Suricata is vulnerable to unbounded memory growth for decompression](https://agentprime.io/advisories/CVE-2025-64334.md)
  `CVE-2025-64334` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Nov 2025 · Tags: Denial of service
- [Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref](https://agentprime.io/advisories/CVE-2025-59150.md)
  `CVE-2025-59150` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2025 · Tags: Memory corruption
- [Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms](https://agentprime.io/advisories/CVE-2025-59149.md)
  `CVE-2025-59149` · CVE record: OISF suricata · CVSS 6.2 Medium · Not analysed yet · Published 1 Oct 2025 · Tags: Memory corruption
- [Suricata's improper use of entropy keyword can lead to a NULL-ptr deref](https://agentprime.io/advisories/CVE-2025-59148.md)
  `CVE-2025-59148` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2025 · Tags: Memory corruption
- [Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets](https://agentprime.io/advisories/CVE-2025-59147.md)
  `CVE-2025-59147` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 1 Oct 2025 · Tags: CWE-358
- [Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation](https://agentprime.io/advisories/CVE-2025-53538.md)
  `CVE-2025-53538` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 22 Jul 2025 · Tags: Denial of service

Older: <https://agentprime.io/advisories/technology/oisf-suricata.md?cursor=WyIyMDI1LTA3LTIyVDIxOjM2OjAzLjk3NjAwMFoiLCJDVkUtMjAyNS01MzUzOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=oisf-suricata>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/oisf-suricata/>. Everything for agents: <https://agentprime.io/llms.txt>.