Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2026-45747— Suricata lua/tls: null dereference in TlsGetCertInfo

Quick assessment

Affected

OISF suricata

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

oisf Suricata是oisf组织开源的一款网络入侵检测与防御软件。 oisf Suricata 7.0.16之前版本存在异常处理不当漏洞，该漏洞源于Lua TLS证书信息助手在Lua脚本请求缺少证书字段的TLS流量证书信息时可能解引用NULL证书字段，特制TLS流量可能导致Suricata崩溃，造成拒绝服务。

CVSS 7.5 · High EPSS 0.42% · P36 Updated Sep 11, 2026

Possible ATT&CK Techniques 2 AI

T1074 · Data Staged T1217.001

Affected Version Matrix 1

Vendor	Product	Version Range	Status
OISF	suricata	`< 7.0.16`	affected

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-45747

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Suricata lua/tls: null dereference in TlsGetCertInfo

Source: CVE Program / CVE List V5

Vulnerability Description

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to version 7.0.16, the Lua TLS certificate information helper could dereference NULL certificate fields when a Lua script requested certificate information for TLS traffic where some certificate fields were absent. Crafted TLS traffic processed by a deployment using affected Lua TLS scripting could crash Suricata, resulting in denial of service. Version 7.0.16 contains a fix. As a workaround, avoid Lua scripts that call TLS certificate information helpers on untrusted traffic (`TlsGetCertInfo` function), or update scripts to handle missing certificate fields where possible.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

空指针解引用

Source: CVE Program / CVE List V5

Vulnerability Title

oisf Suricata 异常处理不当漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
OISF	suricata	< 7.0.16	-

II. Public POCs for CVE-2026-45747

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-45747

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-45747 (2)

🔗 Security #6286: lua/tls: null dereference in GetCertInfo - Suricata - Open Information Security Foundation Read full article x_refsource_MISC
🔗 lua/tls: null dereference in TlsGetCertInfo · Advisory · OISF/suricata · GitHub x_refsource_CONFIRM

Vendor Pages for CVE-2026-45747 (1)

🔗 Suricata 8.0.5 and 7.0.16 released! - Announcements - Suricata Read full article x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2026-45747

Same Patch Batch · OISF · 2026-09-10 · 15 CVEs total

CVE-2026-45764	9.1 CRITICAL	Suricata http2: protocol-change type confusion can lead to denial of service
CVE-2026-46387	7.5 HIGH	Suricata http2: decompression bomb can cause denial of service in Suricata
CVE-2026-45759	7.5 HIGH	Suricata http1: quadratic Content-Disposition processing can lead to denial of service
CVE-2026-45762	7.5 HIGH	Suricata defrag: missing address-family check can lead to remote crash
CVE-2026-45769	7.5 HIGH	ikev2: unbounded client transform storage can lead to resource exhaustion
CVE-2026-45765	7.5 HIGH	Suricata dnp3: unbounded reassembly can lead to resource exhaustion
CVE-2026-45770	7.5 HIGH	Suricata lua: excessive flow variable registration can bypass sandbox
CVE-2026-45768	7.5 HIGH	Suricata ldap: unbounded responses per transaction can lead to resource exhaustion
CVE-2026-45766	7.5 HIGH	Suricata nfs: unbounded stateful structures can lead to resource exhaustion
CVE-2026-45763	5.9 MEDIUM	Suricata lua: sandbox allocation limit not enforced for new allocations
CVE-2026-45751	5.9 MEDIUM	Suricata detect/transform: use-after-free in dotprefix transform
CVE-2026-45752	5.9 MEDIUM	Suricata detect/transform: use-after-free in decompress transforms
CVE-2026-45767	4.4 MEDIUM	Suricata datasets: save to absolute filename can be bypassed when combined with load comma
CVE-2026-45761	3.3 LOW	Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rul

IV. Related Vulnerabilities

Same product: suricata

Same vendor: OISF

Same weakness: CWE-476