CVE-2026-31933

Suricata stream: quadratic complexity in stream inspection

CVSS 7.5 HIGHEPSS 0.4%CWE-407

Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

OISF · suricata

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/OISF/suricata/security/advisories/GHSA-hvp5-gpr6-j4gp https://redmine.openinfosecfoundation.org/issues/8272