Skip to content
Sign in
5.9 Medium

CVE-2026-45752 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after it had been reallocated and freed. The issue is reached during network traffic processing, but requires a malicious rule as Suricata will crash whatever the traffic. Version 8.0.5 contains a fix. As a workaround, avoid rules that chain `gunzip` or `zlib_deflate` with `max-size` bigger than 4096 after another transform.

Affected products and versions

Product Affected versions Fixed in
suricata 8.0 8.0.0 → < 8.0.5 8.0.5

Other CVEs of suricata

The 86 CVEs of suricata →
CVE-2026-94084 Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use… 9.4 Critical CVE-2026-94083 Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state… 9.4 Critical CVE-2026-71855 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 5.9 Medium CVE-2026-71418 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 7.5 High
Track this CVE