CVE-2025-64333
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.
Vendor
Product
CWE
Yayın Tarihi
2025-11-26 23:15:48
Güncelleme
2025-12-05 13:55:46
Source Identifier
security-advisories@github.com
KEV Date Added
-