7.5
High
CVE-2026-46352 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
Description
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, Suricata's IP defragmentation code could deadlock when processing fragmented traffic containing an encapsulated tunnel protocol whose payload is itself fragmented. Version 8.0.5 contains a fix. No known workarounds are available.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| suricata 8.0 | 8.0.0 → < 8.0.5 | 8.0.5 |
Other CVEs of suricata
The 86 CVEs of suricata →
CVE-2026-94084
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use…
9.4
Critical
CVE-2026-94083
Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state…
9.4
Critical
CVE-2026-71855
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
5.9
Medium
CVE-2026-71418
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine
7.5
High