Latest vulnerabilities for "oisf suricata"

Where

Sort:

Versions

8.0.0

OISF SuricataSuricata dcerpc: quadratic complexity in dcerpc buffering

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31937

OISF SuricataSuricata http2: unbounded resource consumption

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31935

OISF SuricataSuricata smtp/mine: quadratic complexity in extracting urls

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31934

OISF SuricataSuricata stream: quadratic complexity in stream inspection

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31933

OISF SuricataSuricata krb5: quadratic complexity in krb5 buffering

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31932

OISF SuricataSuricata tls: null dereference in tls.alpn rule keyword

Risk 43

Severity

7.5

First published (updated )

CVE-2026-31931

OISF SuricataSuricata detect/alert: heap-use-after-free on alert queue expansion

Risk 47

Severity

9.1

EPSS

0.06%

First published (updated )

CVE-2026-22264

Suricata SuricataSuricata http1: quadratic complexity in headers parsing over multiple packets

Risk 19

Severity

5.3

EPSS

0.02%

First published (updated )

CVE-2026-22263

OISF SuricataSuricata datasets: stack overflow when saving a set

Risk 61

Severity

9.8

EPSS

0.08%

First published (updated )

CVE-2026-22262

OISF SuricataSuricata eve/alert: http1 xff handling can lead to denial of service

Risk 19

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2026-22261

Suricata SuricataSuricata http1: infinite recursion in decompression

Risk 31

Severity

7.5

EPSS

0.02%

First published (updated )

CVE-2026-22260

OISF SuricataSuricata dnp3: unbounded transaction growth

Risk 31

Severity

7.5

EPSS

0.06%

First published (updated )

CVE-2026-22259

OISF SuricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2026-22258

OISF SuricataSuricata is vulnerable to a heap buffer overflow on verdict

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64330

OISF SuricataSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64331

OISF SuricataSuricata is vulnerable to a stack overflow on larger compressed data

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64332

OISF SuricataSuricata is vulnerable to a stack overflow from big content-type

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64333

OISF SuricataSuricata is vulnerable to a null deref when used with base64_data

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64335

OISF SuricataSuricata is vulnerable to unbounded memory growth for decompression

Risk 43

Severity

7.5

First published (updated )

CVE-2025-64334

OISF SuricataSuricata ja4: invalid alpn leads to panic

Risk 43

Severity

7.5

First published (updated )

CVE-2024-47522

OISF SuricataSuricata defrag: off by one can lead to policy bypass

Risk 27

Severity

5.3

First published (updated )

CVE-2024-45796

OISF SuricataSuricata detect/datasets: reachable assertion with unimplemented rule option

Risk 43

Severity

7.5

First published (updated )

CVE-2024-45795

Fedoraproject FedoraSuricata http2: header handling evasion

Risk 19

Severity

5.3

EPSS

0.04%

First published (updated )

CVE-2024-24568

Fedoraproject FedoraSuricata http: heap use after free with http.request_header and http.response_header keywords

Risk 54

Severity

8.1

EPSS

0.04%

First published (updated )

CVE-2024-23839

OISF Suricatacrafted traffic can cause denial of service

Risk 31

Severity

7.5

EPSS

0.05%

First published (updated )

CVE-2024-23836

Fedoraproject FedoraSuricata's pgsql: memory exhaustion use on record parsing

Risk 31

Severity

7.5

EPSS

0.04%

First published (updated )

CVE-2024-23835

OISF SuricataPath Traversal

Risk 43

Severity

7.5

First published (updated )

CVE-2023-35852

OISF SuricataCode Injection

Risk 86

Severity

9.8

First published (updated )

CVE-2023-35853

OISF SuricataSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

Risk 45

Severity

7.5

First published (updated )

CVE-2021-35063

OISF SuricataInput Validation

Risk 26

Severity

First published (updated )

CVE-2013-5919

Trending

Versions

OISF SuricataSuricata dcerpc: quadratic complexity in dcerpc buffering

OISF SuricataSuricata http2: unbounded resource consumption

OISF SuricataSuricata smtp/mine: quadratic complexity in extracting urls

OISF SuricataSuricata stream: quadratic complexity in stream inspection

OISF SuricataSuricata krb5: quadratic complexity in krb5 buffering

Don't miss critical vulnerabilities

OISF SuricataSuricata tls: null dereference in tls.alpn rule keyword

OISF SuricataSuricata detect/alert: heap-use-after-free on alert queue expansion

Suricata SuricataSuricata http1: quadratic complexity in headers parsing over multiple packets

OISF SuricataSuricata datasets: stack overflow when saving a set

OISF SuricataSuricata eve/alert: http1 xff handling can lead to denial of service

Don't miss critical vulnerabilities

Suricata SuricataSuricata http1: infinite recursion in decompression

OISF SuricataSuricata dnp3: unbounded transaction growth

OISF SuricataSuricata DCERPC: unbounded fragment buffering leads to memory exhaustion

OISF SuricataSuricata is vulnerable to a heap buffer overflow on verdict

OISF SuricataSuricata is vulnerable to a stack overflow on large file transfers with http-body-printable

Don't miss critical vulnerabilities

OISF SuricataSuricata is vulnerable to a stack overflow on larger compressed data

OISF SuricataSuricata is vulnerable to a stack overflow from big content-type

OISF SuricataSuricata is vulnerable to a null deref when used with base64_data

OISF SuricataSuricata is vulnerable to unbounded memory growth for decompression

OISF SuricataSuricata ja4: invalid alpn leads to panic

Don't miss critical vulnerabilities

OISF SuricataSuricata defrag: off by one can lead to policy bypass

OISF SuricataSuricata detect/datasets: reachable assertion with unimplemented rule option

Fedoraproject FedoraSuricata http2: header handling evasion

Fedoraproject FedoraSuricata http: heap use after free with http.request_header and http.response_header keywords

OISF Suricatacrafted traffic can cause denial of service

Don't miss critical vulnerabilities

Fedoraproject FedoraSuricata's pgsql: memory exhaustion use on record parsing

OISF SuricataPath Traversal

OISF SuricataCode Injection

OISF SuricataSuricata before 5.0.7 and 6.x before 6.0.3 has a "critical evasion."

OISF SuricataInput Validation

Don't miss critical vulnerabilities

Company

Resources

Contact