CVE-2026-31931: Suricata tls: null dereference in tls.alpn rule keyword
Published Apr 2, 2026
·Updated
Suricata is a network IDS, IPS and NSM engine. From version 8.0.0 to before version 8.0.4, use of the "tls.alpn" rule keyword can cause Suricata to crash with a NULL dereference. This issue has been patched in version 8.0.4.
Affected Software
1 affected component
OISF Suricata>=8.0.0<8.0.4
Event History
Apr 2, 2026
CVE Published
via MITRE·02:01 PM
Data Sourced
via MITRE·02:01 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software