Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-94084

Опубликовано: 20 сент. 2026
Источник: nvd
CVSS3: 9.4
EPSS Низкий

Описание

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
Версия до 8.0.7 (исключая)

EPSS

Процентиль: 46%
0.0054
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 9.4
ubuntu
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS3: 9.8
redhat
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

CVSS3: 9.4
debian
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a ...

CVSS3: 9.4
redos
8 дней назад

Уязвимость suricata

CVSS3: 9.4
github
около 2 месяцев назад

Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.

EPSS

Процентиль: 46%
0.0054
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-416