CVE-2026-31933: Suricata stream: quadratic complexity in stream inspection
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/suricatato a version that resolves this vulnerability.Fixed in 8.0.6-r0 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 7.0.15 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 8.0.4
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31933?
CVE-2026-31933 has a moderate severity level as it can cause performance degradation in Suricata's IDS mode.
How do I fix CVE-2026-31933?
To fix CVE-2026-31933, upgrade Suricata to version 7.0.15 or later, or 8.0.4 or later.
What versions of Suricata are affected by CVE-2026-31933?
CVE-2026-31933 affects versions of Suricata prior to 7.0.15 and versions from 8.0.0 to 8.0.3.
What impact does CVE-2026-31933 have on system performance?
CVE-2026-31933 can cause significant slowdowns in Suricata's performance when processing specially crafted traffic.
Is there a patch available for CVE-2026-31933?
Yes, CVE-2026-31933 has been patched in Suricata versions 7.0.15 and 8.0.4.