Oisf vulnerabilities
90 CVEs and advisories name Oisf as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-53538Suricata's mishandling of data on HTTP2 stream 0 can lead to resource starvation
- CVE-2025-29918Suricata pcre: negated pcr can cause infinite loop
- CVE-2025-29917Suricata decode_base64: signature can do large memory allocation
- CVE-2025-29916Suricata datasets: ruleset declared settings can lead to resource starvation
- CVE-2025-29915Suricata af-packet: defrag option can lead to truncated packets affecting visibility
- CVE-2024-55629Suricata generic detection bypass using TCP urgent support
- CVE-2024-55628Suricata oversized resource names utilizing DNS name compression can lead to resource starvation
- CVE-2024-55627Suricata segfault on StreamingBufferSlideToOffsetWithRegions
- CVE-2024-55626Suricata oversized bpf file can lead to buffer overflow
- CVE-2024-55605Suricata allows stack overflow in transforms
- CVE-2024-47522Suricata ja4: invalid alpn leads to panic
- CVE-2024-47188Suricata http/byte-ranges: missing hashtable random seed leads to potential DoS
- CVE-2024-47187Suricata datasets: missing hashtable random seed leads to potential DoS
- CVE-2024-45797LibHTP's unbounded header handling leads to denial service
- CVE-2024-45796Suricata defrag: off by one can lead to policy bypass
- CVE-2024-45795Suricata detect/datasets: reachable assertion with unimplemented rule option
- CVE-2024-38536Suricata http/range: NULL-ptr deref when http.memcap is reached
- CVE-2024-38535Suricata http2: oom from duplicate headers
- CVE-2024-38534Suricata modbus: txs without responses are never freed
- CVE-2024-37151Suricata defrag: IP ID reuse can lead to policy bypass
- CVE-2024-32867Suricata's defrag contains various issues leading to policy bypass
- CVE-2024-32664Suricata's base64 contains an out of bounds write
- CVE-2024-32663Suricata 's http2 parser contains an improper compressed header handling can lead to resource starvation
- CVE-2024-28871Excessive CPU used on malformed traffic
- CVE-2024-28870Suricata uses excessive resource use in malformed ssh traffic parsing
- CVE-2024-23837LibHTP unbounded folded header handling leads to denial service
- CVE-2024-24568Suricata http2: header handling evasion
- CVE-2024-23839Suricata http: heap use after free with http.request_header and http.response_header keywords
- CVE-2024-23836crafted traffic can cause denial of service
- CVE-2024-23835Suricata's pgsql: memory exhaustion use on record parsing