Suricata is a network IDS, IPS and NSM engine

In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code

Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments

Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform

Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when…

Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder

Suricata http2: protocol-change type confusion can lead to denial of service

Suricata is a network IDS, IPS and NSM engine

An issue was discovered in Suricata 5.0.0

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine

Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state

Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption

Suricata app-layer: passed flows can retain transactions, causing resource exhaustion

Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption

Suricata smb: some SMB flows can cause resource exhaustion

Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption

Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock

Suricata lua: excessive flow variable registration can bypass sandbox

ikev2: unbounded client transform storage can lead to resource exhaustion

Suricata ldap: unbounded responses per transaction can lead to resource exhaustion

Suricata nfs: unbounded stateful structures can lead to resource exhaustion

Suricata dnp3: unbounded reassembly can lead to resource exhaustion

Suricata defrag: missing address-family check can lead to remote crash

Suricata http1: quadratic Content-Disposition processing can lead to denial of service

Suricata detect/transform: use-after-free in dotprefix transform

Suricata lua/tls: null dereference in TlsGetCertInfo

Suricata http2: decompression bomb can cause denial of service in Suricata

Suricata dcerpc: quadratic complexity in dcerpc buffering

Suricata http2: unbounded resource consumption

Suricata smtp/mine: quadratic complexity in extracting urls

Suricata stream: quadratic complexity in stream inspection

Suricata krb5: quadratic complexity in krb5 buffering

Suricata tls: null dereference in tls.alpn rule keyword

Suricata is a network IDS, IPS and NSM engine

Suricata is a network IDS, IPS and NSM engine

Suricata is a network IDS, IPS and NSM engine

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine