DEBIAN-CVE-2026-63448

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...

CVE-2026-63448

Suricata (OISF), a network IDS/IPS/NSM engine, is vulnerable to resource exhaustion in its SMB parser prior to versions 7.0.17 and 8.0.6 . On flows where Suricata observes payload in only one direction (including async-oneside flows), the parser retains force-completed transactions because cleanu...

CVE-2026-63448 Suricata smb: some SMB flows can cause resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, the SMB parser can retain force-completed transactions on flows where Suricata sees payload in only one direction, including async-oneside flows, becaus...