CVE-2026-63451

Katalog CVE

CVSS 5.5 · Medium EPSS 0,15%

Kerentanan Heap-based Buffer Overflow pada oisf suricata. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that combines frame inspection without content and a transformed match without content can make src/detect-engine-prefilter.c select multiple non-prefilter frame engines while preparing signatures for non-prefilter inspection. Loading the crafted rule, including in test mode, can trigger a heap buffer overflow and crash Suricata; network traffic alone cannot reach the flaw. This issue is fixed in version 8.0.6.

Rincian

Terbit di NVD

18 September 2026

Terakhir diubah

28 September 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow

EPSS (30 hari)

0,15% peluang dieksploitasi; lebih tinggi dari 3,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OISF/suricata/security/advisories/GHSA-6qwq-j83r-qp34 mitigasi · advisory vendor
• https://github.com/OISF/suricata/commit/5449ae170bfce213907d9bab87143a59774ed48f patch
• https://github.com/OISF/suricata/commit/d62acf5d75a61b76b16815e773408852f41b1975 patch
• https://github.com/OISF/suricata/pull/15807 patch
• https://github.com/OISF/suricata/releases/tag/suricata-8.0.6 release notes
• https://redmine.openinfosecfoundation.org/issues/8590 permissions required