Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Suricata — Vulnerabilities & Security Advisories 88

All 88 CVE vulnerabilities found in Suricata, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known vulnerability data for the Suricata open-source intrusion detection and prevention system, categorized by common weakness enumeration types. It compiles a comprehensive list of security flaws affecting the Suricata engine, its associated libraries, and related network analysis components, covering reports from initial disclosure through to confirmed remediation over the past several years. The collected data is sourced from various vendor advisories, official project changelogs, and third-party security databases to provide a holistic view of the product's security posture. Users can track a vendor's advisories to monitor official patch releases and version-specific mitigations. This resource also allows security professionals to understand a weakness class by examining how specific coding errors or configuration missteps manifest in high-traffic network environments. Additionally, you can look up a product's vulnerability history to assess the evolution of security risks in previous releases and identify recurring patterns in exploitability. The page serves as a reference point for administrators and developers seeking to audit their deployments, prioritize patching efforts, and ensure compliance with security standards. By centralizing this information, the page facilitates better risk management decisions and supports the maintenance of secure network infrastructure. It is designed for technical audiences who require precise, factual data without redundant commentary or promotional material. The structure prioritizes clarity and ease of navigation to help users quickly locate relevant entries and cross-reference findings with their own system logs and audit trails.

Vendor: Open Information Security Foundation

CVE ID Title CVSS Severity Published
CVE-2026-45752 Suricata detect/transform: use-after-free in decompress transforms CWE-416 5.9 Medium 2026-09-10
CVE-2026-45751 Suricata detect/transform: use-after-free in dotprefix transform CWE-416 5.9 Medium 2026-09-10
CVE-2026-45747 Suricata lua/tls: null dereference in TlsGetCertInfo CWE-476 7.5 High 2026-09-10
CVE-2026-46387 Suricata http2: decompression bomb can cause denial of service in Suricata CWE-409 7.5 High 2026-09-10
CVE-2026-45763 Suricata lua: sandbox allocation limit not enforced for new allocations CWE-770 5.9 Medium 2026-09-10
CVE-2026-31937 Suricata dcerpc: quadratic complexity in dcerpc buffering CWE-407 7.5 High 2026-04-02
CVE-2026-31935 Suricata http2: unbounded resource consumption CWE-400 7.5 High 2026-04-02
CVE-2026-31934 Suricata smtp/mine: quadratic complexity in extracting urls CWE-407 7.5 High 2026-04-02
CVE-2026-31933 Suricata stream: quadratic complexity in stream inspection CWE-407 7.5 High 2026-04-02
CVE-2026-31932 Suricata krb5: quadratic complexity in krb5 buffering CWE-407 7.5 High 2026-04-02
CVE-2026-31931 Suricata tls: null dereference in tls.alpn rule keyword CWE-476 7.5 High 2026-04-02
CVE-2026-22264 Suricata detect/alert: heap-use-after-free on alert queue expansion CWE-416 7.4 High 2026-01-27
CVE-2026-22263 Suricata http1: quadratic complexity in headers parsing over multiple packets CWE-1050 5.3 Medium 2026-01-27
CVE-2026-22262 Suricata datasets: stack overflow when saving a set CWE-121 5.9 Medium 2026-01-27
CVE-2026-22261 Suricata eve/alert: http1 xff handling can lead to denial of service CWE-1050 3.7 Low 2026-01-27
CVE-2026-22260 Suricata http1: infinite recursion in decompression CWE-674 7.5 High 2026-01-27
CVE-2026-22259 Suricata dnp3: unbounded transaction growth CWE-400 7.5 High 2026-01-27
CVE-2026-22258 Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion CWE-400 7.5 High 2026-01-27
CVE-2025-64344 Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer CWE-121 7.5 High 2025-11-26
CVE-2025-64330 Suricata is vulnerable to a heap buffer overflow on verdict CWE-122 7.5 High 2025-11-26
CVE-2025-64331 Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable CWE-121 7.5 High 2025-11-26
CVE-2025-64332 Suricata is vulnerable to a stack overflow on larger compressed data CWE-121 7.5 High 2025-11-26
CVE-2025-64333 Suricata is vulnerable to a stack overflow from big content-type CWE-121 7.5 High 2025-11-26
CVE-2025-64335 Suricata is vulnerable to a null deref when used with base64_data CWE-476 7.5 High 2025-11-26
CVE-2025-64334 Suricata is vulnerable to unbounded memory growth for decompression CWE-770 7.5 High 2025-11-26
CVE-2025-59150 Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref CWE-476 7.5 High 2025-10-01
CVE-2025-59149 Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms CWE-121 6.2 Medium 2025-10-01
CVE-2025-59148 Suricata's improper use of entropy keyword can lead to a NULL-ptr deref CWE-476 7.5 High 2025-10-01
CVE-2025-59147 Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets CWE-358 7.5 High 2025-10-01
CVE-2025-53538 Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation CWE-770 7.5 High 2025-07-22

All 88 known CVE vulnerabilities affecting Suricata with full Chinese analysis, references, and POCs where available.