Описание
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| suricata | fixed | 1:8.0.5-1 | package | |
| suricata | ignored | trixie | package |
Примечания
https://github.com/OISF/suricata/security/advisories/GHSA-jqr4-ch38-wvm6
https://redmine.openinfosecfoundation.org/issues/8420 (suricata-7.0.16)
https://redmine.openinfosecfoundation.org/issues/8419 (suricata-8.0.5)
https://github.com/OISF/suricata/commit/6c63fec9cb1f7333132951240da3f3e9f0194cb9 (suricata-7.0.16)
https://github.com/OISF/suricata/commit/cc59c567f7f23ddf1bb03e3b09f88928bc80da6a (suricata-7.0.16)
https://github.com/OISF/suricata/commit/40aede627e215d033ba2fe10ffa020053fc9aeb0 (suricata-7.0.16)
https://github.com/OISF/suricata/commit/f43d442251ab96adcc0bfece6919832b1dc8e9be (suricata-8.0.5)
https://github.com/OISF/suricata/commit/af37786ee48e0f53a3b29d6c9776f33cee9c67f9 (suricata-8.0.5)
https://github.com/OISF/suricata/commit/c029c0958537224ef85f008a578265b52803021d (suricata-8.0.5)
Связанные уязвимости
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Уязвимость анализатора NFS системы обнаружения и предотвращения вторжений Suricata, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2026-8141: package `suricata` update to version 8.0.5-alt1