Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-31933

Опубликовано: 02 апр. 2026
Источник: redhat
CVSS3: 7.5

Описание

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

A flaw was found in Suricata, a network Intrusion Detection System (IDS), Intrusion Prevention System (IPS), and Network Security Monitoring (NSM) engine. A remote attacker can exploit this vulnerability by sending specially crafted network traffic. This can cause Suricata to slow down significantly, leading to a denial of service (DoS) in IDS mode, which impacts the system's ability to detect and prevent threats.

Отчет

This is an Important denial of service vulnerability in Suricata, a network Intrusion Detection System (IDS). Specially crafted network traffic can cause Suricata to experience significant performance degradation when operating in IDS mode. This can impair the system's ability to effectively detect and prevent threats in Red Hat environments where Suricata is deployed.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Дополнительная информация

Статус:

Important
Дефект:
CWE-770
https://bugzilla.redhat.com/show_bug.cgi?id=2454375Suricata: Suricata: Denial of Service due to specially crafted network traffic

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
4 месяца назад

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

CVSS3: 7.5
nvd
4 месяца назад

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

CVSS3: 7.5
debian
4 месяца назад

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.1 ...

CVSS3: 7.5
fstec
4 месяца назад

Уязвимость режима IDS системы обнаружения и предотвращения вторжений Suricata, позволяющая нарушителю вызвать отказ в обслуживании

7.5 High

CVSS3