Vulnerabilidades em OISF

90 resultados
Análise Vexday

Com 55 CVEs catalogadas e nenhuma registrada em exploração ativa pelo CISA KEV, a taxa de exploração do OISF situa-se abaixo da média geral do catálogo, o que indica um perfil de risco relativamente contido no momento. A ausência de vulnerabilidades de severidade crítica e de provas de conceito públicas reforça esse cenário, embora 6 CVEs tenham surgido nos últimos 90 dias, sinalizando atividade de descoberta recente que merece acompanhamento. O tipo de falha mais frequente é CWE-770 (alocação irrestrita de recursos), padrão que pode impactar a disponibilidade de sistemas de inspeção de tráfego em ambientes de alta carga. A CVE mais perigosa ativa no momento é CVE-2024-23837, com EPSS de 0,0119, indicando probabilidade de exploração ainda baixa, mas suficiente para justificar priorização nos ciclos regulares de patching.

CVE-2026-63448MEDIUMSuricata smb: some SMB flows can cause resource exhaustionEPSS 0.4%CVE-2025-59148HIGHSuricata's improper use of entropy keyword can lead to a NULL-ptr derefEPSS 0.4%CVE-2026-45766HIGHSuricata nfs: unbounded stateful structures can lead to resource exhaustionEPSS 0.4%CVE-2026-45765HIGHSuricata dnp3: unbounded reassembly can lead to resource exhaustionEPSS 0.4%CVE-2026-22263MEDIUMSuricata http1: quadratic complexity in headers parsing over multiple packetsEPSS 0.4%CVE-2026-45764CRITICALSuricata http2: protocol-change type confusion can lead to denial of serviceEPSS 0.4%CVE-2025-53537HIGHLibHTP's memory leak with lzma can lead to resource starvationEPSS 0.4%CVE-2025-64335HIGHSuricata is vulnerable to a null deref when used with base64_dataEPSS 0.4%CVE-2026-57229MEDIUMSuricata smtp/mime: incomplete state reset allows detection bypassEPSS 0.4%CVE-2026-57224MEDIUMSuricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustionEPSS 0.4%CVE-2026-94083CRITICALSuricata before 8.0.7 has a DoH2 type confusion that can cause an invalid free, because cleanup code for the HTTP2 state is executed even thEPSS 0.4%CVE-2026-94084CRITICALSuricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with EPSS 0.4%CVE-2026-57227HIGHSuricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messagesEPSS 0.4%CVE-2026-63446HIGHSuricata app-layer: passed flows can retain transactions, causing resource exhaustionEPSS 0.4%CVE-2025-59147HIGHSuricata is Vulnerable to Detection Bypass via Crafted Multiple SYN PacketsEPSS 0.4%CVE-2025-64330HIGHSuricata is vulnerable to a heap buffer overflow on verdictEPSS 0.4%CVE-2025-64332HIGHSuricata is vulnerable to a stack overflow on larger compressed dataEPSS 0.4%CVE-2026-22264HIGHSuricata detect/alert: heap-use-after-free on alert queue expansionEPSS 0.4%CVE-2026-63452HIGHSuricata http1: repeated brotli compression bombs can cause excessive CPU consumptionEPSS 0.4%CVE-2026-63447HIGHSuricata ftp: crafted FTP traffic can cause quadratic CPU consumptionEPSS 0.4%