agentprime: oisf-suricataEvery new CVE for oisf-suricata.https://agentprime.io/CVE-2026-94084: Use after free in OISF Suricatahttps://agentprime.io/advisories/CVE-2026-94084/https://agentprime.io/advisories/CVE-2026-94084/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 01:20:20 GMTCVEcriticalCVE-2026-94083: Type confusion in OISF Suricatahttps://agentprime.io/advisories/CVE-2026-94083/https://agentprime.io/advisories/CVE-2026-94083/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sun, 20 Sep 2026 01:18:05 GMTCVEcriticalCVE-2026-71855: Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow statehttps://agentprime.io/advisories/CVE-2026-71855/https://agentprime.io/advisories/CVE-2026-71855/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:25:58 GMTCVECVE-2026-71418: Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumptionhttps://agentprime.io/advisories/CVE-2026-71418/https://agentprime.io/advisories/CVE-2026-71418/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:24:28 GMTCVECVE-2026-57223: Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalationhttps://agentprime.io/advisories/CVE-2026-57223/https://agentprime.io/advisories/CVE-2026-57223/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:23:28 GMTCVECVE-2026-63446: Suricata app-layer: passed flows can retain transactions, causing resource exhaustionhttps://agentprime.io/advisories/CVE-2026-63446/https://agentprime.io/advisories/CVE-2026-63446/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:22:15 GMTCVECVE-2026-63447: Suricata ftp: crafted FTP traffic can cause quadratic CPU consumptionhttps://agentprime.io/advisories/CVE-2026-63447/https://agentprime.io/advisories/CVE-2026-63447/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:21:06 GMTCVECVE-2026-63448: Suricata smb: some SMB flows can cause resource exhaustionhttps://agentprime.io/advisories/CVE-2026-63448/https://agentprime.io/advisories/CVE-2026-63448/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:20:01 GMTCVECVE-2026-57229: Suricata smtp/mime: incomplete state reset allows detection bypasshttps://agentprime.io/advisories/CVE-2026-57229/https://agentprime.io/advisories/CVE-2026-57229/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:18:38 GMTCVECVE-2026-57225: Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loadinghttps://agentprime.io/advisories/CVE-2026-57225/https://agentprime.io/advisories/CVE-2026-57225/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:17:48 GMTCVECVE-2026-63452: Suricata http1: repeated brotli compression bombs can cause excessive CPU consumptionhttps://agentprime.io/advisories/CVE-2026-63452/https://agentprime.io/advisories/CVE-2026-63452/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:16:51 GMTCVECVE-2026-63451: Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule loadhttps://agentprime.io/advisories/CVE-2026-63451/https://agentprime.io/advisories/CVE-2026-63451/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:15:52 GMTCVECVE-2026-57227: Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messageshttps://agentprime.io/advisories/CVE-2026-57227/https://agentprime.io/advisories/CVE-2026-57227/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:14:55 GMTCVECVE-2026-63450: Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detectionhttps://agentprime.io/advisories/CVE-2026-63450/https://agentprime.io/advisories/CVE-2026-63450/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:13:42 GMTCVECVE-2026-63449: Suricata sip: large SIP message bodies can evade detection with frame keywordhttps://agentprime.io/advisories/CVE-2026-63449/https://agentprime.io/advisories/CVE-2026-63449/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:12:30 GMTCVECVE-2026-57228: Suricata smtp/mime: heap out-of-bounds read quoted-printable decoderhttps://agentprime.io/advisories/CVE-2026-57228/https://agentprime.io/advisories/CVE-2026-57228/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:11:24 GMTCVECVE-2026-57224: Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustionhttps://agentprime.io/advisories/CVE-2026-57224/https://agentprime.io/advisories/CVE-2026-57224/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:08:46 GMTCVECVE-2026-57226: Suricata swf: heap buffer overflow in SWF decompression depth handlinghttps://agentprime.io/advisories/CVE-2026-57226/https://agentprime.io/advisories/CVE-2026-57226/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:07:31 GMTCVECVE-2026-57222: Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6https://agentprime.io/advisories/CVE-2026-57222/https://agentprime.io/advisories/CVE-2026-57222/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 20:05:15 GMTCVECVE-2026-46352: Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlockhttps://agentprime.io/advisories/CVE-2026-46352/https://agentprime.io/advisories/CVE-2026-46352/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 18:28:21 GMTCVECVE-2026-45770: Suricata lua: excessive flow variable registration can bypass sandboxhttps://agentprime.io/advisories/CVE-2026-45770/https://agentprime.io/advisories/CVE-2026-45770/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:42:03 GMTCVECVE-2026-45769: ikev2: unbounded client transform storage can lead to resource exhaustionhttps://agentprime.io/advisories/CVE-2026-45769/https://agentprime.io/advisories/CVE-2026-45769/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:38:46 GMTCVECVE-2026-45768: Suricata ldap: unbounded responses per transaction can lead to resource exhaustionhttps://agentprime.io/advisories/CVE-2026-45768/https://agentprime.io/advisories/CVE-2026-45768/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:37:17 GMTCVECVE-2026-45767: Suricata datasets: save to absolute filename can be bypassed when combined with load commandhttps://agentprime.io/advisories/CVE-2026-45767/https://agentprime.io/advisories/CVE-2026-45767/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:31:02 GMTCVECVE-2026-45766: Suricata nfs: unbounded stateful structures can lead to resource exhaustionhttps://agentprime.io/advisories/CVE-2026-45766/https://agentprime.io/advisories/CVE-2026-45766/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:26:39 GMTCVECVE-2026-45765: Suricata dnp3: unbounded reassembly can lead to resource exhaustionhttps://agentprime.io/advisories/CVE-2026-45765/https://agentprime.io/advisories/CVE-2026-45765/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:25:22 GMTCVECVE-2026-45764: Suricata http2: protocol-change type confusion can lead to denial of servicehttps://agentprime.io/advisories/CVE-2026-45764/https://agentprime.io/advisories/CVE-2026-45764/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:14:30 GMTCVEcriticalCVE-2026-45762: Suricata defrag: missing address-family check can lead to remote crashhttps://agentprime.io/advisories/CVE-2026-45762/https://agentprime.io/advisories/CVE-2026-45762/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:09:21 GMTCVECVE-2026-45761: Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule loadhttps://agentprime.io/advisories/CVE-2026-45761/https://agentprime.io/advisories/CVE-2026-45761/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:02:48 GMTCVECVE-2026-45759: Suricata http1: quadratic Content-Disposition processing can lead to denial of servicehttps://agentprime.io/advisories/CVE-2026-45759/https://agentprime.io/advisories/CVE-2026-45759/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 21:01:19 GMTCVECVE-2026-45752: Suricata detect/transform: use-after-free in decompress transformshttps://agentprime.io/advisories/CVE-2026-45752/https://agentprime.io/advisories/CVE-2026-45752/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 20:37:49 GMTCVECVE-2026-45751: Suricata detect/transform: use-after-free in dotprefix transformhttps://agentprime.io/advisories/CVE-2026-45751/https://agentprime.io/advisories/CVE-2026-45751/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 20:28:30 GMTCVECVE-2026-45747: Suricata lua/tls: null dereference in TlsGetCertInfohttps://agentprime.io/advisories/CVE-2026-45747/https://agentprime.io/advisories/CVE-2026-45747/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 14:17:44 GMTCVECVE-2026-46387: Suricata http2: decompression bomb can cause denial of service in Suricatahttps://agentprime.io/advisories/CVE-2026-46387/https://agentprime.io/advisories/CVE-2026-46387/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 14:10:28 GMTCVECVE-2026-45763: Suricata lua: sandbox allocation limit not enforced for new allocationshttps://agentprime.io/advisories/CVE-2026-45763/https://agentprime.io/advisories/CVE-2026-45763/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Sep 2026 13:24:43 GMTCVECVE-2026-31937: Suricata dcerpc: quadratic complexity in dcerpc bufferinghttps://agentprime.io/advisories/CVE-2026-31937/https://agentprime.io/advisories/CVE-2026-31937/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:38:22 GMTCVECVE-2026-31935: Suricata http2: unbounded resource consumptionhttps://agentprime.io/advisories/CVE-2026-31935/https://agentprime.io/advisories/CVE-2026-31935/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:36:44 GMTCVECVE-2026-31934: Suricata smtp/mine: quadratic complexity in extracting urlshttps://agentprime.io/advisories/CVE-2026-31934/https://agentprime.io/advisories/CVE-2026-31934/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:21:08 GMTCVECVE-2026-31933: Suricata stream: quadratic complexity in stream inspectionhttps://agentprime.io/advisories/CVE-2026-31933/https://agentprime.io/advisories/CVE-2026-31933/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:03:35 GMTCVECVE-2026-31932: Suricata krb5: quadratic complexity in krb5 bufferinghttps://agentprime.io/advisories/CVE-2026-31932/https://agentprime.io/advisories/CVE-2026-31932/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:02:40 GMTCVECVE-2026-31931: Suricata tls: null dereference in tls.alpn rule keywordhttps://agentprime.io/advisories/CVE-2026-31931/https://agentprime.io/advisories/CVE-2026-31931/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Apr 2026 14:01:03 GMTCVECVE-2026-22264: Suricata detect/alert: heap-use-after-free on alert queue expansionhttps://agentprime.io/advisories/CVE-2026-22264/https://agentprime.io/advisories/CVE-2026-22264/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 18:33:50 GMTCVECVE-2026-22263: Suricata http1: quadratic complexity in headers parsing over multiple packetshttps://agentprime.io/advisories/CVE-2026-22263/https://agentprime.io/advisories/CVE-2026-22263/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 18:27:45 GMTCVECVE-2026-22262: Suricata datasets: stack overflow when saving a sethttps://agentprime.io/advisories/CVE-2026-22262/https://agentprime.io/advisories/CVE-2026-22262/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 18:18:52 GMTCVECVE-2026-22261: Suricata eve/alert: http1 xff handling can lead to denial of servicehttps://agentprime.io/advisories/CVE-2026-22261/https://agentprime.io/advisories/CVE-2026-22261/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 18:10:27 GMTCVECVE-2026-22260: Suricata http1: infinite recursion in decompressionhttps://agentprime.io/advisories/CVE-2026-22260/https://agentprime.io/advisories/CVE-2026-22260/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 17:30:39 GMTCVECVE-2026-22259: Suricata dnp3: unbounded transaction growthhttps://agentprime.io/advisories/CVE-2026-22259/https://agentprime.io/advisories/CVE-2026-22259/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 17:13:11 GMTCVECVE-2026-22258: Suricata DCERPC: unbounded fragment buffering leads to memory exhaustionhttps://agentprime.io/advisories/CVE-2026-22258/https://agentprime.io/advisories/CVE-2026-22258/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Jan 2026 16:17:29 GMTCVECVE-2025-64344: Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBufferhttps://agentprime.io/advisories/CVE-2025-64344/https://agentprime.io/advisories/CVE-2025-64344/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 23:05:33 GMTCVECVE-2025-64330: Suricata is vulnerable to a heap buffer overflow on verdicthttps://agentprime.io/advisories/CVE-2025-64330/https://agentprime.io/advisories/CVE-2025-64330/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 26 Nov 2025 23:03:40 GMTCVE