46 matches found
suricata
Suricata Introducción Suricata es un motor de IDS, IPS y NSM de red desarrollado por la OISF y la comunidad de Suricata. Recursos Página principal Seguimiento de errores Guía de usuario Guía de desarrollo Guía de instalación Foro de soporte de usuarios Contribuir Aceptamos encantados parches y...
libhtp
Anuncio de fin de vida útil de LibHTP 7 de julio de 2026 Tras el fin de vida útil de Suricata 7, el proyecto libhtp ya no será mantenido ni actualizado por OISF. Suricata 8 y versiones posteriores utilizan un fork del código de libhtp que ha sido convertido y reescrito en Rust. Está disponible ba...
suricata suricata-8.0.7
Suricata Introduction Suricata is a network IDS, IPS and NSM engine developed by the OISF and the Suricata community. Resources Home Page Bug Tracker User Guide Dev Guide Installation Guide User Support Forum Contributing We're happily taking patches and other contributions. Please see our...
CVE-2025-64331: Stack-based Buffer Overflow
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if the user has increased the HTTP response body limit and enabled the...
CVE-2025-64332: Stack-based Buffer Overflow
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow that causes Suricata to crash can occur if SWF decompression is enabled. This issue has been patched in version...
EUVD-2019-7816
Malware in sbrugna...
EUVD-2025-22378
Malicious code in bioql PyPI...
CVE-2025-59148: NULL Pointer Dereference
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 8.0.0 and below incorrectly handle the entropy keyword when not anchored to a "sticky" buffer, which can lead to a segmentation fault. This issue is fixed ...
CVE-2025-53538
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of...
CVE-2025-53538 Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of...
CVE-2025-53538 Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation
Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of...
CVE-2025-53538
CVE-2025-53538 affects Suricata (IDS/IPS/NSM engine by OISF) in versions 7.0.10 and earlier and 8.0.0-beta1 through 8.0.0-rc1. The root cause is mishandling of data on HTTP/2 stream 0, causing uncontrolled memory usage and loss of visibility. The issue scores as CVSS v3.1/7.5 (HIGH) with NETWORK ...
CVE-2019-17420
In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and other products, an HTTP protocol parsing error causes the httpheader signature to not alert on a response with a single \r\n ending...
Suricata 6.x < 6.0.19 / 7.x < 7.0.5 Multiple Vulnerabilities
The version of OISF Suricata installed on the remote host is prior to 6.0.19 or 7.x prior to 7.0.5. It is, therefore, affected by multiple vulnerabilities: - In affected versions, specially crafted traffic or datasets can cause a limited buffer overflow. CVE-2024-32664 - In affected versions, a...
CVE-2024-28870
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in ale...
CVE-2024-28870
Suricata (IDS/IPS/NSM) is affected when parsing an overly long SSH banner, which can cause excessive CPU usage and log volume. The issue is a result of banner parsing inefficiency and has been fixed in Suricata 6.0.17 and 7.0.4. If deploying affected lines prior to those patches, upgrade to one o...
CVE-2024-28870 Suricata uses excessive resource use in malformed ssh traffic parsing
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in ale...
CVE-2024-28870 Suricata uses excessive resource use in malformed ssh traffic parsing
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine developed by the OISF and the Suricata community. When parsing an overly long SSH banner, Suricata can use excessive CPU resources, as well as cause excessive logging volume in ale...
OISF suricata-update unsafely deserializes YAML data
Suricata-Update uses the insecure yaml.load function. Code will be executed if the yaml-file contains lines like: yaml hello: !!python/object/apply:os.system 'ls -l /tmp/output' The vulnerable function can be triggered by "suricata-update list-sources". The locally stored index.yaml will be loade...
GHSA-7C4H-W765-6PWG OISF suricata-update unsafely deserializes YAML data
Suricata-Update uses the insecure yaml.load function. Code will be executed if the yaml-file contains lines like: yaml hello: !!python/object/apply:os.system 'ls -l /tmp/output' The vulnerable function can be triggered by "suricata-update list-sources". The locally stored index.yaml will be loade...