Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4jpj-5857-48jp

Опубликовано: 20 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.4

Описание

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

EPSS

Процентиль: 46%
0.0054
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.4
ubuntu
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS3: 9.8
redhat
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS3: 9.4
nvd
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS3: 9.4
debian
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a ...

CVSS3: 9.4
redos
8 дней назад

Уязвимость suricata

EPSS

Процентиль: 46%
0.0054
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-416