SZB-a1380fa102
Suricata 8.0.8 fixes multiple high-severity vulnerabilities
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Suricata
- Product
- Suricata
- First seen
Summary
Suricata 8.0.8 was released to address several vulnerabilities, as posted to oss-security by Victor Julien. The listed high-severity issues include CPU exhaustion in the tftp parser, quadratic complexity in SIP TCP header processing, and memory exhaustion in HTTP/2 Brotli decoding.
If you use Suricata
Upgrade Suricata to version 8.0.8 or later.
Review deployments that parse TFTP, SIP, HTTP/2, or DoH2 traffic for resource exhaustion or crashes.
Monitor sensor CPU and memory usage until the upgrade is complete.
What the sources say 1
· oss-security: “Suricata 8.0.8 was released addressing a number of vulnerabilities.” Source