Aller au contenu
Se connecter
7.5 Élevée

CVE-2025-64333 Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the…

Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.

Produits et versions touchés

Produit Versions touchées Corrigé en
suricata 8.0 premières → < 8.0.2 8.0.2
suricata 7.0 premières → < 7.0.13 7.0.13

Autres CVE de suricata

Les 86 CVE de suricata →
CVE-2026-94084 Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use… 9.4 Critique CVE-2026-94083 Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state… 9.4 Critique CVE-2026-71855 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 5.9 Moyenne CVE-2026-71418 Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine 7.5 Élevée
Suivre cette CVE