# OISF suricata. Every CVE that names OISF suricata among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first (an older page) - [Suricata pcre: negated pcr can cause infinite loop](https://agentprime.io/advisories/CVE-2025-29918.md) `CVE-2025-29918` · CVE record: OISF suricata · CVSS 6.2 Medium · Not analysed yet · Published 10 Apr 2025 · Tags: Denial of service - [Suricata decode_base64: signature can do large memory allocation](https://agentprime.io/advisories/CVE-2025-29917.md) `CVE-2025-29917` · CVE record: OISF suricata · CVSS 6.2 Medium · Not analysed yet · Published 10 Apr 2025 · Tags: Denial of service - [Suricata datasets: ruleset declared settings can lead to resource starvation](https://agentprime.io/advisories/CVE-2025-29916.md) `CVE-2025-29916` · CVE record: OISF suricata · CVSS 6.2 Medium · Not analysed yet · Published 10 Apr 2025 · Tags: Denial of service - [Suricata af-packet: defrag option can lead to truncated packets affecting visibility](https://agentprime.io/advisories/CVE-2025-29915.md) `CVE-2025-29915` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Apr 2025 · Tags: Weak cryptography or TLS - [Suricata generic detection bypass using TCP urgent support](https://agentprime.io/advisories/CVE-2024-55629.md) `CVE-2024-55629` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-437 - [Suricata oversized resource names utilizing DNS name compression can lead to resource starvation](https://agentprime.io/advisories/CVE-2024-55628.md) `CVE-2024-55628` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: CWE-405, CWE-779 - [Suricata segfault on StreamingBufferSlideToOffsetWithRegions](https://agentprime.io/advisories/CVE-2024-55627.md) `CVE-2024-55627` · CVE record: OISF suricata · CVSS 5.9 Medium · Not analysed yet · Published 6 Jan 2025 · Tags: Memory corruption - [Suricata oversized bpf file can lead to buffer overflow](https://agentprime.io/advisories/CVE-2024-55626.md) `CVE-2024-55626` · CVE record: OISF suricata · CVSS 3.3 Low · Not analysed yet · Published 6 Jan 2025 · Tags: Memory corruption - [Suricata allows stack overflow in transforms](https://agentprime.io/advisories/CVE-2024-55605.md) `CVE-2024-55605` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 6 Jan 2025 · Tags: Denial of service - [Suricata ja4: invalid alpn leads to panic](https://agentprime.io/advisories/CVE-2024-47522.md) `CVE-2024-47522` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2024 · Tags: Denial of service - [Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS](https://agentprime.io/advisories/CVE-2024-47188.md) `CVE-2024-47188` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2024 · Tags: Weak cryptography or TLS - [Suricata datasets: missing hashtable random seed leads to potential DoS](https://agentprime.io/advisories/CVE-2024-47187.md) `CVE-2024-47187` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2024 · Tags: Weak cryptography or TLS - [Suricata defrag: off by one can lead to policy bypass](https://agentprime.io/advisories/CVE-2024-45796.md) `CVE-2024-45796` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 16 Oct 2024 · Tags: CWE-193 - [Suricata detect/datasets: reachable assertion with unimplemented rule option](https://agentprime.io/advisories/CVE-2024-45795.md) `CVE-2024-45795` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 16 Oct 2024 · Tags: Denial of service - [Suricata http/range: NULL-ptr deref when http.memcap is reached](https://agentprime.io/advisories/CVE-2024-38536.md) `CVE-2024-38536` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Memory corruption - [Suricata http2: oom from duplicate headers](https://agentprime.io/advisories/CVE-2024-38535.md) `CVE-2024-38535` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Suricata modbus: txs without responses are never freed](https://agentprime.io/advisories/CVE-2024-38534.md) `CVE-2024-38534` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 11 Jul 2024 · Tags: Denial of service - [Suricata defrag: IP ID reuse can lead to policy bypass](https://agentprime.io/advisories/CVE-2024-37151.md) `CVE-2024-37151` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 11 Jul 2024 · Tags: CWE-754 - [Suricata's defrag contains various issues leading to policy bypass](https://agentprime.io/advisories/CVE-2024-32867.md) `CVE-2024-32867` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2024 · Tags: CWE-754 - [Suricata's base64 contains an out of bounds write](https://agentprime.io/advisories/CVE-2024-32664.md) `CVE-2024-32664` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2024 · Tags: Memory corruption - [Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation](https://agentprime.io/advisories/CVE-2024-32663.md) `CVE-2024-32663` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 7 May 2024 · Tags: Denial of service - [Suricata uses excessive resource use in malformed ssh traffic parsing](https://agentprime.io/advisories/CVE-2024-28870.md) `CVE-2024-28870` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2024 · Tags: Denial of service - [Suricata http2: header handling evasion](https://agentprime.io/advisories/CVE-2024-24568.md) `CVE-2024-24568` · CVE record: OISF suricata · CVSS 5.3 Medium · Not analysed yet · Published 26 Feb 2024 · Tags: Broken access control - [Suricata http: heap use after free with http.request_header and http.response_header keywords](https://agentprime.io/advisories/CVE-2024-23839.md) `CVE-2024-23839` · CVE record: OISF suricata · CVSS 7.1 High · Not analysed yet · Published 26 Feb 2024 · Tags: Memory corruption - [crafted traffic can cause denial of service](https://agentprime.io/advisories/CVE-2024-23836.md) `CVE-2024-23836` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Feb 2024 · Tags: Denial of service - [Suricata's pgsql: memory exhaustion use on record parsing](https://agentprime.io/advisories/CVE-2024-23835.md) `CVE-2024-23835` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 26 Feb 2024 · Tags: Denial of service Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .