Oisf vulnerabilities
90 CVEs and advisories name Oisf as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-45752Suricata detect/transform: use-after-free in decompress transforms
- CVE-2026-45751Suricata detect/transform: use-after-free in dotprefix transform
- CVE-2026-45747Suricata lua/tls: null dereference in TlsGetCertInfo
- CVE-2026-46387Suricata http2: decompression bomb can cause denial of service in Suricata
- CVE-2026-45763Suricata lua: sandbox allocation limit not enforced for new allocations
- CVE-2026-31937Suricata dcerpc: quadratic complexity in dcerpc buffering
- CVE-2026-31935Suricata http2: unbounded resource consumption
- CVE-2026-31934Suricata smtp/mine: quadratic complexity in extracting urls
- CVE-2026-31933Suricata stream: quadratic complexity in stream inspection
- CVE-2026-31932Suricata krb5: quadratic complexity in krb5 buffering
- CVE-2026-31931Suricata tls: null dereference in tls.alpn rule keyword
- CVE-2026-22264Suricata detect/alert: heap-use-after-free on alert queue expansion
- CVE-2026-22263Suricata http1: quadratic complexity in headers parsing over multiple packets
- CVE-2026-22262Suricata datasets: stack overflow when saving a set
- CVE-2026-22261Suricata eve/alert: http1 xff handling can lead to denial of service
- CVE-2026-22260Suricata http1: infinite recursion in decompression
- CVE-2026-22259Suricata dnp3: unbounded transaction growth
- CVE-2026-22258Suricata DCERPC: unbounded fragment buffering leads to memory exhaustion
- CVE-2025-64344Suricata is vulnerable to a stack overflow from unbounded stack allocation in LuaPushStringBuffer
- CVE-2025-64330Suricata is vulnerable to a heap buffer overflow on verdict
- CVE-2025-64331Suricata is vulnerable to a stack overflow on large file transfers with http-body-printable
- CVE-2025-64332Suricata is vulnerable to a stack overflow on larger compressed data
- CVE-2025-64333Suricata is vulnerable to a stack overflow from big content-type
- CVE-2025-64335Suricata is vulnerable to a null deref when used with base64_data
- CVE-2025-64334Suricata is vulnerable to unbounded memory growth for decompression
- CVE-2025-59150Suricata: Keyword tls.subjectaltname can lead to NULL-ptr deref
- CVE-2025-59149Suricata: Stack buffer overflow in rule parser when processing long keywords with transforms
- CVE-2025-59148Suricata's improper use of entropy keyword can lead to a NULL-ptr deref
- CVE-2025-59147Suricata is Vulnerable to Detection Bypass via Crafted Multiple SYN Packets
- CVE-2025-53537LibHTP's memory leak with lzma can lead to resource starvation