CVE-2026-45751

A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a use-after-free vulnerability in the inspection-buffer helper. This occurs when a chained transform reallocates a buffer, leaving an inspection pointer referencing freed memory. This issue,...

CVE-2026-45752

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after i...

DEBIAN-CVE-2026-45751

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45751

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45752

Suricata (OISF network IDS/IPS/NSM engine) versions 8.0.0 through 8.0.4 are affected by a use-after-free in the decompress detection transform pipeline. When certain transforms are chained (e.g., to_lowercase followed by decompress on http.uri), SCInspectionBufferCheckAndExpand reallocs the inspe...

EUVD-2026-75728

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45751

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...

CVE-2026-45751

Suricata (OISF) IDS/IPS engine is affected by a heap-use-after-free in the dotprefix transform (rust/src/detect/transforms/dotprefix.rs). Prior to 7.0.16 and 8.0.5 , the inspection-buffer helper could retain a stale inspect pointer after SCInspectionBufferCheckAndExpand reallocated the backing bu...

CVE-2026-45751 Suricata detect/transform: use-after-free in dotprefix transform

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing...