Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Suricata — Vulnerabilities & Security Advisories 88

All 88 CVE vulnerabilities found in Suricata, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerability data for the Suricata open-source intrusion detection and prevention system, categorized by common weakness enumeration types. It compiles a comprehensive list of security flaws affecting the Suricata engine, its associated libraries, and related network analysis components, covering reports from initial disclosure through to confirmed remediation over the past several years. The collected data is sourced from various vendor advisories, official project changelogs, and third-party security databases to provide a holistic view of the product's security posture. Users can track a vendor's advisories to monitor official patch releases and version-specific mitigations. This resource also allows security professionals to understand a weakness class by examining how specific coding errors or configuration missteps manifest in high-traffic network environments. Additionally, you can look up a product's vulnerability history to assess the evolution of security risks in previous releases and identify recurring patterns in exploitability. The page serves as a reference point for administrators and developers seeking to audit their deployments, prioritize patching efforts, and ensure compliance with security standards. By centralizing this information, the page facilitates better risk management decisions and supports the maintenance of secure network infrastructure. It is designed for technical audiences who require precise, factual data without redundant commentary or promotional material. The structure prioritizes clarity and ease of navigation to help users quickly locate relevant entries and cross-reference findings with their own system logs and audit trails.

Vendor: Open Information Security Foundation

CVE ID Title CVSS Severity Published
CVE-2026-94084 Suricata 8.0.7前Http2ThreadMultiBuf释放后使用漏洞 CWE-416 9.4 Critical 2026-09-20
CVE-2026-94083 Suricata 8.0.7之前DoH2类型混淆导致DoS CWE-843 9.4 Critical 2026-09-20
CVE-2026-71855 Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state CWE-697 5.9 Medium 2026-09-18
CVE-2026-71418 Suricata doh2: crafted HTTP/2 DATA frames can cause quadratic CPU consumption CWE-407 7.5 High 2026-09-18
CVE-2026-57223 Suricata windows: unquoted LocalSystem service ImagePath can allow local privilege escalation CWE-428 7.0 High 2026-09-18
CVE-2026-63446 Suricata app-layer: passed flows can retain transactions, causing resource exhaustion CWE-401 7.5 High 2026-09-18
CVE-2026-63447 Suricata ftp: crafted FTP traffic can cause quadratic CPU consumption CWE-407 7.5 High 2026-09-18
CVE-2026-63448 Suricata smb: some SMB flows can cause resource exhaustion CWE-400 5.9 Medium 2026-09-18
CVE-2026-57229 Suricata smtp/mime: incomplete state reset allows detection bypass CWE-665 5.3 Medium 2026-09-18
CVE-2026-57225 Suricata datasets: NULL pointer dereference in JSON/NDJSON dataset loading CWE-476 3.3 Low 2026-09-18
CVE-2026-63452 Suricata http1: repeated brotli compression bombs can cause excessive CPU consumption CWE-400 7.5 High 2026-09-18
CVE-2026-63451 Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load CWE-122 3.3 Low 2026-09-18
CVE-2026-57227 Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages CWE-400 7.5 High 2026-09-18
CVE-2026-63450 Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection CWE-755 3.7 Low 2026-09-18
CVE-2026-63449 Suricata sip: large SIP message bodies can evade detection with frame keyword CWE-197 3.7 Low 2026-09-18
CVE-2026-57228 Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder CWE-125 8.2 High 2026-09-18
CVE-2026-57224 Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion CWE-400 6.5 Medium 2026-09-18
CVE-2026-57226 Suricata swf: heap buffer overflow in SWF decompression depth handling CWE-122 3.7 Low 2026-09-18
CVE-2026-57222 Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6 CWE-697 5.3 Medium 2026-09-18
CVE-2026-46352 Suricata defrag: fragmented encapsulated traffic with fragments can lead to deadlock CWE-833 7.5 High 2026-09-16
CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox CWE-693 7.5 High 2026-09-10
CVE-2026-45769 ikev2: unbounded client transform storage can lead to resource exhaustion CWE-400 7.5 High 2026-09-10
CVE-2026-45768 Suricata ldap: unbounded responses per transaction can lead to resource exhaustion CWE-400 7.5 High 2026-09-10
CVE-2026-45767 Suricata datasets: save to absolute filename can be bypassed when combined with load command CWE-22 4.4 Medium 2026-09-10
CVE-2026-45766 Suricata nfs: unbounded stateful structures can lead to resource exhaustion CWE-400 7.5 High 2026-09-10
CVE-2026-45765 Suricata dnp3: unbounded reassembly can lead to resource exhaustion CWE-400 7.5 High 2026-09-10
CVE-2026-45764 Suricata http2: protocol-change type confusion can lead to denial of service CWE-843 9.1 Critical 2026-09-10
CVE-2026-45762 Suricata defrag: missing address-family check can lead to remote crash CWE-843 7.5 High 2026-09-10
CVE-2026-45761 Suricata detect: case-insensitive frame handling can cause heap buffer overflow during rule load CWE-122 3.3 Low 2026-09-10
CVE-2026-45759 Suricata http1: quadratic Content-Disposition processing can lead to denial of service CWE-400 7.5 High 2026-09-10

All 88 known CVE vulnerabilities affecting Suricata with full Chinese analysis, references, and POCs where available.