CVE-2026-31937: Suricata dcerpc: quadratic complexity in dcerpc buffering
Suricata is a network IDS, IPS and NSM engine. Prior to version 7.0.15, inefficiency in DCERPC buffering can lead to a performance degradation. This issue has been patched in version 7.0.15.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/suricatato a version that resolves this vulnerability.Fixed in 8.0.6-r0 - Upgrade
Upgrade
Suricatato a version that resolves this vulnerability.Fixed in 7.0.15
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31937?
CVE-2026-31937 has a moderate severity rating due to its potential to cause performance degradation in Suricata.
How do I fix CVE-2026-31937?
To fix CVE-2026-31937, upgrade to Suricata version 7.0.15 or later.
What software is affected by CVE-2026-31937?
CVE-2026-31937 affects Suricata versions prior to 7.0.15.
What is the issue caused by CVE-2026-31937?
CVE-2026-31937 can lead to quadratic complexity in DCERPC buffering, impacting the performance of the system.
When was CVE-2026-31937 published?
CVE-2026-31937 was published as part of the security advisories addressing vulnerabilities in Suricata.