CVE-2025-64334: Suricata is vulnerable to unbounded memory growth for decompression
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2. A workaround involves disabling LZMA decompression or limiting response-body-limit size.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64334?
CVE-2025-64334 has been assessed as having a high severity due to potential unbounded memory growth.
How do I fix CVE-2025-64334?
To fix CVE-2025-64334, you need to upgrade Suricata to version 8.0.2 or later.
What versions of Suricata are affected by CVE-2025-64334?
CVE-2025-64334 affects Suricata versions from 8.0.0 to before 8.0.2.
What issues can arise from CVE-2025-64334?
CVE-2025-64334 may lead to unbounded memory growth during the decompression of compressed HTTP data.
Is there a patch available for CVE-2025-64334?
Yes, a patch for CVE-2025-64334 is available in Suricata version 8.0.2 and later.