Lucene search
K

10 matches found

SUSE CVE
SUSE CVE
added 2025/11/28 12:22 a.m.3 views

SUSE CVE-2025-64334

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS6.8AI score0.00057EPSS
Exploits0References3
NVD
NVD
added 2025/11/26 11:15 p.m.2 views

CVE-2025-64334

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS0.00057EPSS
Exploits0References2
OSV
OSV
added 2025/11/26 11:15 p.m.1 views

DEBIAN-CVE-2025-64334

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS5.3AI score0.00057EPSS
Exploits0References1
CVE
CVE
added 2025/11/26 10:39 p.m.5 views

CVE-2025-64334

Suricata (OISF) versions 8.0.0–8.0.1 are affected by an unbounded memory growth issue during decompression of compressed HTTP data. Root cause: memory growth in HTTP decompression. Impact: potential resource exhaustion (availability). Mitigation/workaround: disable LZMA decompression or limit the...

7.5CVSS6.4AI score0.00057EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/11/26 10:39 p.m.3 views

CVE-2025-64334 Suricata is vulnerable to unbounded memory growth for decompression

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS6.7AI score0.00057EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/11/26 10:39 p.m.2 views

CVE-2025-64334 Suricata is vulnerable to unbounded memory growth for decompression

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS6.4AI score0.00057EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/26 10:39 p.m.1 views

EUVD-2025-199777

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2....

7.5CVSS6.3AI score0.00057EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/11/13 12:0 a.m.2 views

Siemens SIMATIC S7-1500 Allocation of Resources Without Limits or Throttling (CVE-2023-23916)

An allocation of resources without limits or throttling vulnerability exists in curl v7.88.0 based on the chained HTTP compression algorithms, meaning that a server response can be compressed multiple times and potentially with differentalgorithms. The number of acceptable links in this...

6.5CVSS6.7AI score0.00066EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/21 7:15 p.m.0 views

CVE-2022-3252

Improper detection of complete HTTP body decompression SwiftNIO Extras provides a pair of helpers for transparently decompressing received HTTP request or response bodies. These two objects HTTPRequestDecompressor and HTTPResponseDecompressor both failed to detect when the decompressed body was...

7.5CVSS7.2AI score0.00334EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/09/21 12:0 a.m.2 views

PT-2022-21351 · Unknown · Swiftnio Extras

Name of the Vulnerable Software and Affected Versions: SwiftNIO Extras affected versions not specified Description: The issue is related to improper detection of complete HTTP body decompression in SwiftNIO Extras. This can lead to an infinite loop and denial-of-service when trailing junk data is...

7.5CVSS7.2AI score0.00334EPSS
Exploits0References9
Rows per page
Query Builder