OISF Suricata

• CVE-2025-64331 High 7.5 Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable 0.3%
• CVE-2025-64332 High 7.5 Suricata is vulnerable to a stack overflow on larger compressed data 0.4%
• CVE-2025-64333 High 7.5 Suricata is vulnerable to a stack overflow from big content-type 0.3%
• CVE-2025-64335 High 7.5 Suricata is vulnerable to a null deref when used with base64_data 0.4%
• CVE-2025-64334 High 7.5 Suricata is vulnerable to unbounded memory growth for decompression 0.4%
• CVE-2025-59150 High 7.5 Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref 0.5%
• CVE-2025-59149 Medium 6.2 Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms 0.2%
• CVE-2025-59148 High 7.5 Suricata's improper use of entropy keyword can lead to a NULL-ptr deref 0.4%
• CVE-2025-59147 High 7.5 Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets 0.4%
• CVE-2025-53538 High 7.5 Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation 0.5%
• CVE-2025-29918 Medium 6.2 Suricata pcre: negated pcr can cause infinite loop 0.3%
• CVE-2025-29917 Medium 6.2 Suricata decode_base64: signature can do large memory allocation 0.3%
• CVE-2025-29916 Medium 6.2 Suricata datasets: ruleset declared settings can lead to resource starvation 0.3%
• CVE-2025-29915 High 7.5 Suricata af-packet: defrag option can lead to truncated packets affecting visibility 0.3%
• CVE-2024-55629 High 7.5 Suricata generic detection bypass using TCP urgent support 0.5%
• CVE-2024-55628 High 7.5 Suricata oversized resource names utilizing DNS name compression can lead to resource starvation 0.7%
• CVE-2024-55627 Medium 5.9 Suricata segfault on StreamingBufferSlideToOffsetWithRegions 1.0%
• CVE-2024-55626 Low 3.3 Suricata oversized bpf file can lead to buffer overflow 0.2%
• CVE-2024-55605 High 7.5 Suricata allows stack overflow in transforms 0.7%
• CVE-2024-47522 High 7.5 Suricata ja4: invalid alpn leads to panic 0.6%
• CVE-2024-47188 High 7.5 Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS 0.3%
• CVE-2024-47187 High 7.5 Suricata datasets: missing hashtable random seed leads to potential DoS 0.3%
• CVE-2024-45796 Medium 5.3 Suricata defrag: off by one can lead to policy bypass 0.5%
• CVE-2024-45795 High 7.5 Suricata detect/datasets: reachable assertion with unimplemented rule option 0.5%
• CVE-2024-38536 High 7.5 Suricata http/range: NULL-ptr deref when http.memcap is reached 0.9%
• CVE-2024-38535 High 7.5 Suricata http2: oom from duplicate headers 1.2%
• CVE-2024-38534 High 7.5 Suricata modbus: txs without responses are never freed 0.9%
• CVE-2024-37151 Medium 5.3 Suricata defrag: IP ID reuse can lead to policy bypass 0.6%
• CVE-2024-32867 Medium 5.3 Suricata's defrag contains various issues leading to policy bypass 0.7%
• CVE-2024-32664 Medium 5.3 Suricata's base64 contains an out of bounds write 0.9%
• CVE-2024-32663 High 7.5 Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation 1.0%
• CVE-2024-28870 High 7.5 Suricata uses excessive resource use in malformed ssh traffic parsing 0.6%
• CVE-2024-24568 Medium 5.3 Suricata http2: header handling evasion 0.6%
• CVE-2024-23839 High 7.1 Suricata http: heap use after free with http.request_header and http.response_header keywords 0.8%
• CVE-2024-23836 High 7.5 crafted traffic can cause denial of service 1.2%
• CVE-2024-23835 High 7.5 Suricata's pgsql: memory exhaustion use on record parsing 0.9%