SU
Product
suricata
100
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 67Medium 21Low 1
Watch
Add suricata to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22262 | 9.8 | Jan 27 | Suricata datasets: stack overflow when saving a set Affected: < 7.0.14; >= 8.0.0, < 8.0.3 |
| CVE-2023-35853 | 9.8 | Jun 19 | In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code Affected: before 6.0.13 |
| CVE-2021-37592 | 9.8 | Nov 19 | Suricata before 5.0.8 and 6.x before 6.0.4 allows TCP evasion via a client with a crafted TCP/IP stack that can send a certain sequence of segments Affected: before 5.0.8; 6.0.0 before 6.0.4 |
| CVE-2018-10244 | 9.8 | Apr 4 | Suricata version 4.0.4 incorrectly handles the parsing of an EtherNet/IP PDU Affected: 4.0.4 |
| CVE-2026-94084 | 9.4 | Sep 20 | Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform Affected: before 8.0.7 |
| CVE-2026-94083 | 9.4 | Sep 20 | Suricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even though the actual state is HTTP1 (when… Affected: 8.0.0 before 8.0.7 |
| CVE-2026-57228 | 9.1 | Sep 18 | Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder Affected: >= 7.0.13, < 7.0.17 |
| CVE-2026-45764 | 9.1 | Sep 10 | Suricata http2: protocol-change type confusion can lead to denial of service Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
| CVE-2026-22264 | 9.1 | Jan 27 | Suricata detect/alert: heap-use-after-free on alert queue expansion Affected: < 7.0.14; >= 8.0.0, < 8.0.3 |
| CVE-2019-18792 | 9.1 | Jan 6 | An issue was discovered in Suricata 5.0.0 Affected: 4.1.5 before 4.1.6; 5.0.0 |
Showing 10