CVE-2026-71418

Katalog CVE

CVSS 7.5 · High EPSS 0,62%

Kerentanan Inefficient Algorithmic Complexity pada oisf suricata. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame contents instead of clearing the internal buffer. Multiple DATA frames with the EndOfStream flag set can grow the buffer to its 65 KiB limit while causing all prior contents to be processed again, producing quadratic CPU complexity, degraded packet processing, loss of monitoring visibility, or denial of service. This issue is fixed in version 8.0.6.

Rincian

Terbit di NVD

18 September 2026

Terakhir diubah

28 September 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-407: Inefficient Algorithmic Complexity

EPSS (30 hari)

0,62% peluang dieksploitasi; lebih tinggi dari 48,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/OISF/suricata/security/advisories/GHSA-xjgq-3qw4-jp5f mitigasi · advisory vendor
• https://github.com/OISF/suricata/commit/1731805967edf5d31448db2ae43cf72c6cf46c11 patch
• https://github.com/OISF/suricata/commit/26c26dea84f00de95151a0e16d21c1fcafac9648 patch
• https://github.com/OISF/suricata/releases/tag/suricata-8.0.6 release notes
• https://redmine.openinfosecfoundation.org/issues/8725 issue tracking