SU
Product
suricata
100
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 67Medium 21Low 1
Watch
Add suricata to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57224 | 6.5 | Sep 18 | Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion Affected: >= 8.0.0, < 8.0.6 |
| CVE-2025-59149 | 6.2 | Oct 1 | Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community Affected: 8.0.0; 8.0.0; 8.0.0 |
| CVE-2026-57226 | 5.9 | Sep 18 | Suricata swf: heap buffer overflow in SWF decompression depth handling Affected: >= 8.0.0, < 8.0.6; < 7.0.17 |
| CVE-2026-45752 | 5.9 | Sep 10 | Suricata detect/transform: use-after-free in decompress transforms Affected: >= 8.0.0, < 8.0.5 |
| CVE-2026-45763 | 5.9 | Sep 10 | Suricata lua: sandbox allocation limit not enforced for new allocations Affected: >= 8.0.0, < 8.0.5 |
| CVE-2026-57225 | 5.5 | Sep 18 | Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-63451 | 5.5 | Sep 18 | Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load Affected: >= 8.0.0, < 8.0.6 |
| CVE-2025-29918 | 5.5 | Apr 10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.9 |
| CVE-2025-29917 | 5.5 | Apr 10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.9 |
| CVE-2025-29916 | 5.5 | Apr 10 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.9 |
| CVE-2024-55626 | 5.5 | Jan 6 | Suricata oversized bpf file can lead to buffer overflow Affected: < 7.0.8 |
| CVE-2026-57229 | 5.3 | Sep 18 | Suricata smtp/mime: incomplete state reset allows detection bypass Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-63450 | 5.3 | Sep 18 | Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection Affected: < 8.0.6 |
| CVE-2026-63449 | 5.3 | Sep 18 | Suricata sip: large SIP message bodies can evade detection with frame keyword Affected: >= 8.0.0, < 8.0.6 |
| CVE-2026-57222 | 5.3 | Sep 18 | Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6 Affected: >= 8.0.0, < 8.0.6; < 7.0.17 |
| CVE-2026-22263 | 5.3 | Jan 27 | Suricata is a network IDS, IPS and NSM engine Affected: 8.0.0 before 8.0.3 |
| CVE-2026-22261 | 5.3 | Jan 27 | Suricata is a network IDS, IPS and NSM engine Affected: before 7.0.14; 8.0.0 before 8.0.3 |
| CVE-2024-45796 | 5.3 | Oct 16 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: before 7.0.7 |
| CVE-2024-32867 | 5.3 | May 7 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 6.0.0 before 6.0.19; 7.0.0 before 7.0.5 |
| CVE-2024-24568 | 5.3 | Feb 26 | Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine Affected: 7.0.0 before 7.0.3 |
| CVE-2026-45767 | 4.4 | Sep 10 | Suricata datasets: save to absolute filename can be bypassed when combined with load command Affected: >= 8.0.0, < 8.0.5; < 7.0.16 |
Showing 21