Описание
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
A flaw was found in Suricata, a network Intrusion Detection System. Insufficiently bounded Network File System (NFS) parser state structures can be exploited by a remote attacker sending crafted NFS traffic. This can cause Suricata to consume excessive memory, leading to a denial of service.
Отчет
An Important denial of service flaw exists in Suricata due to unbounded NFS parser state structures, allowing crafted NFS traffic to consume excessive memory. While Suricata in Red Hat products is currently not affected, environments with enabled NFS application-layer parsing could be at risk.
Ссылки на источники
Дополнительная информация
Статус:
7.5 High
CVSS3
Связанные уязвимости
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.
Suricata is a network Intrusion Detection System, Intrusion Prevention ...
Уязвимость анализатора NFS системы обнаружения и предотвращения вторжений Suricata, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2026-8141: package `suricata` update to version 8.0.5-alt1
7.5 High
CVSS3