Advisories · Technology
OISF suricata.
Every CVE that names OISF suricata among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.2 Medium
Suricata pcre: negated pcr can cause infinite loop
- OISF suricata
- Denial of service
- CVSS 6.2 Medium
Suricata decode_base64: signature can do large memory allocation
- OISF suricata
- Denial of service
- CVSS 6.2 Medium
Suricata datasets: ruleset declared settings can lead to resource starvation
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata af-packet: defrag option can lead to truncated packets affecting visibility
- OISF suricata
- Weak cryptography or TLS
- CVSS 7.5 High
Suricata generic detection bypass using TCP urgent support
- OISF suricata
- CWE-437
- CVSS 7.5 High
Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
- OISF suricata
- CWE-405
- CWE-779
- CVSS 5.9 Medium
Suricata segfault on StreamingBufferSlideToOffsetWithRegions
- OISF suricata
- Memory corruption
- CVSS 3.3 Low
Suricata oversized bpf file can lead to buffer overflow
- OISF suricata
- Memory corruption
- CVSS 7.5 High
Suricata allows stack overflow in transforms
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata ja4: invalid alpn leads to panic
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS
- OISF suricata
- Weak cryptography or TLS
- CVSS 7.5 High
Suricata datasets: missing hashtable random seed leads to potential DoS
- OISF suricata
- Weak cryptography or TLS
- CVSS 5.3 Medium
Suricata defrag: off by one can lead to policy bypass
- OISF suricata
- CWE-193
- CVSS 7.5 High
Suricata detect/datasets: reachable assertion with unimplemented rule option
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata http/range: NULL-ptr deref when http.memcap is reached
- OISF suricata
- Memory corruption
- CVSS 7.5 High
Suricata http2: oom from duplicate headers
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata modbus: txs without responses are never freed
- OISF suricata
- Denial of service
- CVSS 5.3 Medium
Suricata defrag: IP ID reuse can lead to policy bypass
- OISF suricata
- CWE-754
- CVSS 5.3 Medium
Suricata's defrag contains various issues leading to policy bypass
- OISF suricata
- CWE-754
- CVSS 5.3 Medium
Suricata's base64 contains an out of bounds write
- OISF suricata
- Memory corruption
- CVSS 7.5 High
Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata uses excessive resource use in malformed ssh traffic parsing
- OISF suricata
- Denial of service
- CVSS 5.3 Medium
Suricata http2: header handling evasion
- OISF suricata
- Broken access control
- CVSS 7.1 High
Suricata http: heap use after free with http.request_header and http.response_header keywords
- OISF suricata
- Memory corruption
- CVSS 7.5 High
crafted traffic can cause denial of service
- OISF suricata
- Denial of service
- CVSS 7.5 High
Suricata's pgsql: memory exhaustion use on record parsing
- OISF suricata
- Denial of service