Latest vulnerabilities for vendor "oisf"

Where

Sort:

Software

oisf suricata

oisf libhtp

OISF SuricataSuricata dcerpc: quadratic complexity in dcerpc buffering

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31937

OISF SuricataSuricata http2: unbounded resource consumption

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31935

OISF SuricataSuricata smtp/mine: quadratic complexity in extracting urls

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31934

OISF SuricataSuricata stream: quadratic complexity in stream inspection

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31933

OISF SuricataSuricata krb5: quadratic complexity in krb5 buffering

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31932

OISF SuricataSuricata tls: null dereference in tls.alpn rule keyword

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31931

OISF SuricataSuricata detect/alert: heap-use-after-free on alert queue expansion

Risk 47

Severity

9.1

EPSS

0.06%

First published (updated )

CVE-2026-22264

Suricata SuricataSuricata http1: quadratic complexity in headers parsing over multiple packets

Risk 19

Severity

5.3

EPSS

0.02%

First published (updated )

CVE-2026-22263

OISF SuricataSuricata datasets: stack overflow when saving a set

Risk 61

Severity

9.8

EPSS

0.08%

First published (updated )

CVE-2026-22262

OISF SuricataSuricata eve/alert: http1 xff handling can lead to denial of service

Risk 19

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2026-22261

Suricata SuricataSuricata http1: infinite recursion in decompression

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2026-22260

OISF SuricataSuricata dnp3: unbounded transaction growth

Risk 31

Severity

7.5

EPSS

0.06%

First published (updated )

CVE-2026-22259

OISF SuricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-22258

OISF SuricataSuricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64344

OISF SuricataSuricata is vulnerable to a heap buffer overflow on verdict

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64330

OISF SuricataSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64331

OISF SuricataSuricata is vulnerable to a stack overflow on larger compressed data

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64332

OISF SuricataSuricata is vulnerable to a stack overflow from big content-type

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64333

OISF SuricataSuricata is vulnerable to a null deref when used with base64_data

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64335

OISF SuricataSuricata is vulnerable to unbounded memory growth for decompression

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64334

OISF SuricataSuricata: Keyword tls.subjectaltname can lead to NULL-ptr deref

Risk 43

Severity

7.5

First published (updated )

CVE-2025-59150

OISF SuricataSuricata: Stack buffer overflow in rule parser when processing long keywords with transforms

Risk 36

Severity

6.2

First published (updated )

CVE-2025-59149

OISF SuricataSuricata's improper use of entropy keyword can lead to a NULL-ptr deref

Risk 43

Severity

7.5

First published (updated )

CVE-2025-59148

OISF SuricataSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets

Risk 43

Severity

7.5

First published (updated )

CVE-2025-59147

LibHTP LibHTPLibHTP's memory leak with lzma can lead to resource starvation

Risk 43

Severity

7.5

First published (updated )

CVE-2025-53537

OISF SuricataSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation

Risk 43

Severity

7.5

First published (updated )

CVE-2025-53538

Suricata SuricataSuricata pcre: negated pcr can cause infinite loop

Risk 36

Severity

6.2

First published (updated )

CVE-2025-29918

Suricata SuricataSuricata decode_base64: signature can do large memory allocation

Risk 36

Severity

6.2

First published (updated )

CVE-2025-29917

Suricata SuricataSuricata datasets: ruleset declared settings can lead to resource starvation

Risk 36

Severity

6.2

First published (updated )

CVE-2025-29916

Open Information Security Foundation SuricataSuricata af-packet: defrag option can lead to truncated packets affecting visibility

Risk 43

Severity

7.5

First published (updated )

CVE-2025-29915

Trending

Vendor Risk Score

Software

OISF SuricataSuricata dcerpc: quadratic complexity in dcerpc buffering

OISF SuricataSuricata http2: unbounded resource consumption

OISF SuricataSuricata smtp/mine: quadratic complexity in extracting urls

OISF SuricataSuricata stream: quadratic complexity in stream inspection

OISF SuricataSuricata krb5: quadratic complexity in krb5 buffering

Don't miss critical vulnerabilities

OISF SuricataSuricata tls: null dereference in tls.alpn rule keyword

OISF SuricataSuricata detect/alert: heap-use-after-free on alert queue expansion

Suricata SuricataSuricata http1: quadratic complexity in headers parsing over multiple packets

OISF SuricataSuricata datasets: stack overflow when saving a set

OISF SuricataSuricata eve/alert: http1 xff handling can lead to denial of service

Don't miss critical vulnerabilities

Suricata SuricataSuricata http1: infinite recursion in decompression

OISF SuricataSuricata dnp3: unbounded transaction growth

OISF SuricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion

OISF SuricataSuricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer

OISF SuricataSuricata is vulnerable to a heap buffer overflow on verdict

Don't miss critical vulnerabilities

OISF SuricataSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable

OISF SuricataSuricata is vulnerable to a stack overflow on larger compressed data

OISF SuricataSuricata is vulnerable to a stack overflow from big content-type

OISF SuricataSuricata is vulnerable to a null deref when used with base64_data

OISF SuricataSuricata is vulnerable to unbounded memory growth for decompression

Don't miss critical vulnerabilities

OISF SuricataSuricata: Keyword tls.subjectaltname can lead to NULL-ptr deref

OISF SuricataSuricata: Stack buffer overflow in rule parser when processing long keywords with transforms

OISF SuricataSuricata's improper use of entropy keyword can lead to a NULL-ptr deref

OISF SuricataSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets

LibHTP LibHTPLibHTP's memory leak with lzma can lead to resource starvation

Don't miss critical vulnerabilities

OISF SuricataSuricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation

Suricata SuricataSuricata pcre: negated pcr can cause infinite loop

Suricata SuricataSuricata decode_base64: signature can do large memory allocation

Suricata SuricataSuricata datasets: ruleset declared settings can lead to resource starvation

Open Information Security Foundation SuricataSuricata af-packet: defrag option can lead to truncated packets affecting visibility

Don't miss critical vulnerabilities

Company

Resources

Contact