CVE-2026-71418: Inefficient Algorithmic Complexity

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, DNS-over-HTTP/2 processing in rust/src/http2/http2.rs retains previously processed HTTP/2 DATA frame contents instead of clearing the internal buffer...

PT-2026-95708

Name of the Vulnerable Software and Affected Versions Suricata versions 8.0.0 through 8.0.5 Description DNS-over-HTTP/2 processing in the file rust/src/http2/http2.rs fails to clear the internal buffer, retaining contents from previously processed HTTP/2 DATA frames. When multiple DATA frames wit...