7.5
High
CVE-2024-55628 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.8, DNS resource name compression can lead to small DNS messages containing very large hostnames which can be costly to decode, and lead to very large DNS log records. While there are limits in place, they were too generous. The issue has been addressed in Suricata 7.0.8.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| suricata 7.0 | earliest → < 7.0.8 | 7.0.8 |
Other CVEs of suricata
The 86 CVEs of suricata →
CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use…
9.4
Critical
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state…
9.4
Critical
CVE-2026-71855
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
5.9
Medium
CVE-2026-71418
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
7.5
High