CVE-2025-29918

Katalog CVE

CVSS 5.5 · Medium EPSS 0,27%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada oisf suricata. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. A PCRE rule can be written that leads to an infinite loop when negated PCRE is used. Packet processing thread becomes stuck in infinite loop limiting visibility and availability in inline mode. This vulnerability is fixed in 7.0.9.

Rincian

Terbit di NVD

10 April 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OISF/suricata/security/advisories/GHSA-924c-vvm5-9mqx advisory vendor
• https://github.com/OISF/suricata/commit/b14c67cbdf25fa6c7ffe0d04ddf3ebe67b12b50b patch
• https://redmine.openinfosecfoundation.org/issues/7526 permissions required
• https://lists.debian.org/debian-lts-announce/2025/03/msg00029.html