SU
Product
suricata
100
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 67Medium 21Low 1
Watch
Add suricata to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23839 | 8.1 | Feb 26 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 7.0.0 before 7.0.3 |
| CVE-2026-71855 | 7.5 | Sep 18 | Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state Affected: >= 8.0.0, < 8.0.6; < 7.0.17 |
| CVE-2026-71418 | 7.5 | Sep 18 | Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-63446 | 7.5 | Sep 18 | Suricata app-layer: passed flows can retain transactions, causing resource exhaustion Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-63447 | 7.5 | Sep 18 | Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption Affected: >= 8.0.5, < 8.0.6 |
| CVE-2026-63448 | 7.5 | Sep 18 | Suricata smb: some SMB flows can cause resource exhaustion Affected: >= 8.0.0, < 8.0.6; < 7.0.17 |
| CVE-2026-63452 | 7.5 | Sep 18 | Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-57227 | 7.5 | Sep 18 | Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages Affected: >= 8.0.0, < 8.0.6; >= 7.0.0, < 7.0.17 |
| CVE-2026-46352 | 7.5 | Sep 16 | Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock Affected: >= 8.0.0, < 8.0.5 |
| CVE-2026-45770 | 7.5 | Sep 10 | Suricata lua: excessive flow variable registration can bypass sandbox Affected: >= 8.0.0, < 8.0.5 |
| CVE-2026-45769 | 7.5 | Sep 10 | ikev2: unbounded client transform storage can lead to resource exhaustion Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
| CVE-2026-45768 | 7.5 | Sep 10 | Suricata ldap: unbounded responses per transaction can lead to resource exhaustion Affected: >= 8.0.0, < 8.0.5 |
| CVE-2026-45766 | 7.5 | Sep 10 | Suricata nfs: unbounded stateful structures can lead to resource exhaustion Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
| CVE-2026-45765 | 7.5 | Sep 10 | Suricata dnp3: unbounded reassembly can lead to resource exhaustion Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
| CVE-2026-45762 | 7.5 | Sep 10 | Suricata defrag: missing address-family check can lead to remote crash Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
| CVE-2026-45759 | 7.5 | Sep 10 | Suricata http1: quadratic Content-Disposition processing can lead to denial of service Affected: < 7.0.16; >= 8.0.0, < 8.0.5 |
| CVE-2026-45751 | 7.5 | Sep 10 | Suricata detect/transform: use-after-free in dotprefix transform Affected: < 7.0.16; >= 8.0.0, < 8.0.5 |
| CVE-2026-45747 | 7.5 | Sep 10 | Suricata lua/tls: null dereference in TlsGetCertInfo Affected: < 7.0.16 |
| CVE-2026-46387 | 7.5 | Sep 10 | Suricata http2: decompression bomb can cause denial of service in Suricata Affected: < 7.0.16; >= 8.0.0, < 8.0.5 |
| CVE-2026-31937 | 7.5 | Apr 2 | Suricata dcerpc: quadratic complexity in dcerpc buffering Affected: < 7.0.15 |
| CVE-2026-31935 | 7.5 | Apr 2 | Suricata http2: unbounded resource consumption Affected: < 7.0.15; >= 8.0.0, < 8.0.4 |
| CVE-2026-31934 | 7.5 | Apr 2 | Suricata smtp/mine: quadratic complexity in extracting urls Affected: >= 8.0.0, < 8.0.4 |
| CVE-2026-31933 | 7.5 | Apr 2 | Suricata stream: quadratic complexity in stream inspection Affected: < 7.0.15; >= 8.0.0, < 8.0.4 |
| CVE-2026-31932 | 7.5 | Apr 2 | Suricata krb5: quadratic complexity in krb5 buffering Affected: < 7.0.15; >= 8.0.0, < 8.0.4 |
| CVE-2026-31931 | 7.5 | Apr 2 | Suricata tls: null dereference in tls.alpn rule keyword Affected: >= 8.0.0, < 8.0.4 |
| CVE-2026-22260 | 7.5 | Jan 27 | Suricata http1: infinite recursion in decompression Affected: >= 8.0.0, < 8.0.3 |
| CVE-2026-22259 | 7.5 | Jan 27 | Suricata dnp3: unbounded transaction growth Affected: < 7.0.14; >= 8.0.0, < 8.0.3 |
| CVE-2026-22258 | 7.5 | Jan 27 | Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion Affected: < 7.0.14; >= 8.0.0, < 8.0.3 |
| CVE-2025-64344 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.13; 8.0.0 before 8.0.2 |
| CVE-2025-64335 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: 8.0.0 before 8.0.2 |
| CVE-2025-64334 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: 8.0.0 before 8.0.2 |
| CVE-2025-64333 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.13; 8.0.0 before 8.0.2 |
| CVE-2025-64332 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.13; 8.0.0 before 8.0.2 |
| CVE-2025-64331 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.13; 8.0.0 before 8.0.2 |
| CVE-2025-64330 | 7.5 | Nov 26 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.13; 8.0.0 before 8.0.2 |
| CVE-2025-59150 | 7.5 | Oct 1 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: 8.0.0 |
| CVE-2025-59148 | 7.5 | Oct 1 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: 8.0.0; 8.0.0; 8.0.0 |
| CVE-2025-59147 | 7.5 | Oct 1 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.12; 8.0.0; 8.0.0; 8.0.0 |
| CVE-2025-53538 | 7.5 | Jul 22 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: before 7.0.11; 8.0.0; 8.0.0 |
| CVE-2025-29915 | 7.5 | Apr 10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.9 |
| CVE-2024-55629 | 7.5 | Jan 6 | Suricata generic detection bypass using TCP urgent support Affected: < 7.0.8 |
| CVE-2024-55628 | 7.5 | Jan 6 | Suricata oversized resource names utilizing DNS name compression can lead to resource starvation Affected: < 7.0.8 |
| CVE-2024-55627 | 7.5 | Jan 6 | Suricata segfault on StreamingBufferSlideToOffsetWithRegions Affected: < 7.0.8 |
| CVE-2024-55605 | 7.5 | Jan 6 | Suricata allows stack overflow in transforms Affected: < 7.0.8 |
| CVE-2024-47522 | 7.5 | Oct 16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.7 |
| CVE-2024-47188 | 7.5 | Oct 16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.7 |
| CVE-2024-47187 | 7.5 | Oct 16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.7 |
| CVE-2024-45795 | 7.5 | Oct 16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.7 |
| CVE-2024-38536 | 7.5 | Jul 11 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.6 |
| CVE-2024-38535 | 7.5 | Jul 11 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 6.0.20; 7.0.0 before 7.0.6 |