CVE-2026-45761 Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached...

EUVD-2026-75755

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached...

CVE-2026-45761 Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached...

CVE-2026-45761

Suricata versions prior to 7.0.16 and 8.0.5 are affected by a heap buffer overflow in the rule parsing/loading path. A crafted detection rule using mixed-case frame syntax triggers the overflow while Suricata loads signatures — not via network traffic alone. The CVSS 3.1 score is 3.3 (LOW) , with...

CVE-2026-45759 Suricata http1: quadratic Content-Disposition processing can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP Content-Disposition headers during HTTP response body processing. Crafted HTT...

CVE-2026-45759 Suricata http1: quadratic Content-Disposition processing can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP Content-Disposition headers during HTTP response body processing. Crafted HTT...

CVE-2026-45759 Suricata http1: quadratic Content-Disposition processing can lead to denial of service

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP Content-Disposition headers during HTTP response body processing. Crafted HTT...

CVE-2026-45759

Suricata (a network IDS/IPS/NMS engine) is vulnerable to a denial of service via quadratic processing of large HTTP Content-Disposition headers during HTTP response body processing. Prior to versions 7.0.16 and 8.0.5 , crafted HTTP traffic can cause excessive CPU consumption with no impact on con...

EUVD-2026-75754

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP Content-Disposition headers during HTTP response body processing. Crafted HTT...

cabir_analysis

description: Bluetooth-Worm:SymbOS/Cabir Analysis Bluetooth-Worm:SymbOS/Cabir Analysis 在你开始阅读之前，我必须先声明：请对你读到的一切持保留态度，因为我绝不是 SymbianOS 开发者，也完全不熟悉 SymbianOS 环境。 但为什么还要分析这么老的东西呢？因为这是进入远程攻击领域最简单的途径，如今这类事情动辄价值百万美元的 nday/0day 🤑🤑🤑。而且我还缺乏做那种攻击的专业能力。 好了，既然这些废话都说完了，我们开始吧。Cabir 是什么鬼？它是一个运行在 Symbian...

EUVD-2026-75730

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

CVE-2026-45752 Suricata detect/transform: use-after-free in decompress transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

CVE-2026-45752 Suricata detect/transform: use-after-free in decompress transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

CVE-2026-45752 Suricata detect/transform: use-after-free in decompress transforms

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

CVE-2026-45752

Suricata (OISF network IDS/IPS/NSM engine) versions 8.0.0 through 8.0.4 are affected by a use-after-free in the decompress detection transform pipeline. When certain transforms are chained (e.g., to_lowercase followed by decompress on http.uri), SCInspectionBufferCheckAndExpand reallocs the inspe...

CVE-2026-45751 Suricata detect/transform: use-after-free in dotprefix transform

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

EUVD-2026-75728

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45751 Suricata detect/transform: use-after-free in dotprefix transform

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45751

Suricata (OISF) IDS/IPS engine is affected by a heap-use-after-free in the dotprefix transform (rust/src/detect/transforms/dotprefix.rs). Prior to 7.0.16 and 8.0.5 , the inspection-buffer helper could retain a stale inspect pointer after SCInspectionBufferCheckAndExpand reallocated the backing bu...

CVE-2026-45751 Suricata detect/transform: use-after-free in dotprefix transform

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...