Suricata (< 8.0.8) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/suricata--8.0.8/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioFri, 30 Oct 2026 03:15:06 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgSuricata: Multiple denial-of-service vulnerabilitieshttps://feed.craftedsignal.io/briefs/2026-10-suricata-vulns/Fri, 30 Oct 2026 03:15:06 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-suricata-vulns/Suricata versions prior to 8.0.8 contain multiple high-severity vulnerabilities in protocol processing that can lead to memory exhaustion, CPU exhaustion, or service crashes.Suricata version 8.0.8 addresses several high-severity vulnerabilities affecting protocol inspection. These flaws, identified in internal issues #9085, #9101, #9104, and #9133, allow for denial-of-service conditions through resource exhaustion or application crashes.

Impact

The identified vulnerabilities can cause Suricata to cease inspection or crash when processing specifically crafted network traffic, potentially creating a blind spot in network monitoring. Observed impacts include CPU exhaustion, memory exhaustion, and service termination.

Recommendation

  • Upgrade all Suricata deployments to version 8.0.8 or later immediately.
  • Review network infrastructure logs for evidence of anomalous spikes in resource usage on Suricata sensors corresponding to the protocol parsing activities (TFTP, SIP, HTTP/2, DoH/2).
]]>mediumadvisorydenial-of-servicenetwork-securitypatch-management