CVE-2026-63448 in Suricata SMB parser: unbounded transaction growth on one-sided flows can degrade or stall inspection. CVSS 5.9. Fixed in 7.0.17 and 8.0.6, patch now. #CVE #infosec #Suricata https://www.valtersit.com/cve/CVE-2026-63448/
#suricata — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #suricata, aggregated by home.social.
-
CVE-2026-71855 in Suricata: IPv4/IPv6 flow-state mixup enables detection bypass. CVSS 5.9. Fixed in 7.0.17 and 8.0.6. Update now. #CVE #infosec #Suricata https://www.valtersit.com/cve/CVE-2026-71855/
-
CVE-2026-57224: Oisf Suricata DHCP/RDP parsers fail to track packet direction, causing a DoS in IDS/IPS sensors. CVSS 6.5. Patch to 8.0.6 now. #CVE #infosec #Suricata https://www.valtersit.com/cve/CVE-2026-57224/
-
OISF is well underway with our six-month pilot program with Konstantinos Margaritis and VectorCamp to advance the development of #Vectorscan.
Learn more about this collaboration at #SuriCon on Nov. 20th as Konstantinos will be giving a talk expanding on this work!
-
CVE-2026-57222 Suricata IPPair hash collision lets IPv4/IPv6 state cross-contaminate xbits, FTP data and filter rules. CVSS 5.3. Patched in 7.0.17 and 8.0.6, update now. #CVE #infosec #Suricata https://www.valtersit.com/cve/CVE-2026-57222/