OPENSUSE-SU-2026:10885-1
Vulnerability from csaf_opensuse - Published: 2026-05-28 00:00 - Updated: 2026-09-16 09:05Summary
libsuricata8_0_5-8.0.5-1.1 on GA media
Severity
Moderate
Notes
Title of the patch: libsuricata8_0_5-8.0.5-1.1 on GA media
Description of the patch: These are all security issues fixed in the libsuricata8_0_5-8.0.5-1.1 package on the GA media of openSUSE Tumbleweed.
Patchnames: openSUSE-Tumbleweed-2026-10885
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2026-45751
Threats
Impact
important
References
37 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "libsuricata8_0_5-8.0.5-1.1 on GA media",
"title": "Title of the patch"
},
{
"category": "description",
"text": "These are all security issues fixed in the libsuricata8_0_5-8.0.5-1.1 package on the GA media of openSUSE Tumbleweed.",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Tumbleweed-2026-10885",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_10885-1.json"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45751 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45751/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45752 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45752/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45761 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45762 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45762/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45763 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45763/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45764 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45764/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45765 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45765/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45766 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45766/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45767 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45767/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45768 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45768/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45769 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45769/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-45770 page",
"url": "https://www.suse.com/security/cve/CVE-2026-45770/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46352 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46352/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46387 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46387/"
}
],
"title": "libsuricata8_0_5-8.0.5-1.1 on GA media",
"tracking": {
"current_release_date": "2026-09-16T09:05:15Z",
"generator": {
"date": "2026-05-28T00:00:00Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:10885-1",
"initial_release_date": "2026-05-28T00:00:00Z",
"revision_history": [
{
"date": "2026-05-28T00:00:00Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T09:05:15Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libsuricata8_0_5-8.0.5-1.1.aarch64",
"product": {
"name": "libsuricata8_0_5-8.0.5-1.1.aarch64",
"product_id": "libsuricata8_0_5-8.0.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "suricata-8.0.5-1.1.aarch64",
"product": {
"name": "suricata-8.0.5-1.1.aarch64",
"product_id": "suricata-8.0.5-1.1.aarch64"
}
},
{
"category": "product_version",
"name": "suricata-devel-8.0.5-1.1.aarch64",
"product": {
"name": "suricata-devel-8.0.5-1.1.aarch64",
"product_id": "suricata-devel-8.0.5-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "libsuricata8_0_5-8.0.5-1.1.ppc64le",
"product": {
"name": "libsuricata8_0_5-8.0.5-1.1.ppc64le",
"product_id": "libsuricata8_0_5-8.0.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "suricata-8.0.5-1.1.ppc64le",
"product": {
"name": "suricata-8.0.5-1.1.ppc64le",
"product_id": "suricata-8.0.5-1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "suricata-devel-8.0.5-1.1.ppc64le",
"product": {
"name": "suricata-devel-8.0.5-1.1.ppc64le",
"product_id": "suricata-devel-8.0.5-1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libsuricata8_0_5-8.0.5-1.1.s390x",
"product": {
"name": "libsuricata8_0_5-8.0.5-1.1.s390x",
"product_id": "libsuricata8_0_5-8.0.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "suricata-8.0.5-1.1.s390x",
"product": {
"name": "suricata-8.0.5-1.1.s390x",
"product_id": "suricata-8.0.5-1.1.s390x"
}
},
{
"category": "product_version",
"name": "suricata-devel-8.0.5-1.1.s390x",
"product": {
"name": "suricata-devel-8.0.5-1.1.s390x",
"product_id": "suricata-devel-8.0.5-1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libsuricata8_0_5-8.0.5-1.1.x86_64",
"product": {
"name": "libsuricata8_0_5-8.0.5-1.1.x86_64",
"product_id": "libsuricata8_0_5-8.0.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "suricata-8.0.5-1.1.x86_64",
"product": {
"name": "suricata-8.0.5-1.1.x86_64",
"product_id": "suricata-8.0.5-1.1.x86_64"
}
},
{
"category": "product_version",
"name": "suricata-devel-8.0.5-1.1.x86_64",
"product": {
"name": "suricata-devel-8.0.5-1.1.x86_64",
"product_id": "suricata-devel-8.0.5-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Tumbleweed",
"product": {
"name": "openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:tumbleweed"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libsuricata8_0_5-8.0.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64"
},
"product_reference": "libsuricata8_0_5-8.0.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsuricata8_0_5-8.0.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le"
},
"product_reference": "libsuricata8_0_5-8.0.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsuricata8_0_5-8.0.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x"
},
"product_reference": "libsuricata8_0_5-8.0.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsuricata8_0_5-8.0.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64"
},
"product_reference": "libsuricata8_0_5-8.0.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-8.0.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64"
},
"product_reference": "suricata-8.0.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-8.0.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le"
},
"product_reference": "suricata-8.0.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-8.0.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x"
},
"product_reference": "suricata-8.0.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-8.0.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64"
},
"product_reference": "suricata-8.0.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-devel-8.0.5-1.1.aarch64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64"
},
"product_reference": "suricata-devel-8.0.5-1.1.aarch64",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-devel-8.0.5-1.1.ppc64le as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le"
},
"product_reference": "suricata-devel-8.0.5-1.1.ppc64le",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-devel-8.0.5-1.1.s390x as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x"
},
"product_reference": "suricata-devel-8.0.5-1.1.s390x",
"relates_to_product_reference": "openSUSE Tumbleweed"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "suricata-devel-8.0.5-1.1.x86_64 as component of openSUSE Tumbleweed",
"product_id": "openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
},
"product_reference": "suricata-devel-8.0.5-1.1.x86_64",
"relates_to_product_reference": "openSUSE Tumbleweed"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-45751",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45751"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata\u0027s inspection-buffer helper could leave an inspection pointer referencing freed memory after a chained transform caused the backing buffer to be reallocated. The issue is reached during a specific network traffic processing, and requires a specific but not malicious rule. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, avoid rules that chain `dotprefix` transform after another one.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45751",
"url": "https://www.suse.com/security/cve/CVE-2026-45751"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45751"
},
{
"cve": "CVE-2026-45752",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45752"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when certain detection transforms are chained, the decompress transform pipeline could read from an inspection buffer after it had been reallocated and freed. The issue is reached during network traffic processing, but requires a malicious rule as Suricata will crash whatever the traffic. Version 8.0.5 contains a fix. As a workaround, avoid rules that chain `gunzip` or `zlib_deflate` with `max-size` bigger than 4096 after another transform.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45752",
"url": "https://www.suse.com/security/cve/CVE-2026-45752"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45752"
},
{
"cve": "CVE-2026-45759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45759"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata could repeatedly perform expensive parsing of large HTTP `Content-Disposition` headers during HTTP response body processing. Crafted HTTP traffic could cause excessive CPU usage and denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, use a rule like `alert http1 any any -\u003e any any (sid: 1; http.request_header; content: \"Content-Disposition:\"; startswith; bsize: \u003e 8192; bypass;)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45759",
"url": "https://www.suse.com/security/cve/CVE-2026-45759"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45759"
},
{
"cve": "CVE-2026-45761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45761"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a crafted rule using mixed-case frame syntax could trigger a heap buffer overflow while Suricata is loading signatures. The issue is reached during rule parsing/loading rather than by network traffic alone. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, preprocess rules to check that frames are all lowercase and/or only load trusted rulesets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45761",
"url": "https://www.suse.com/security/cve/CVE-2026-45761"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45761"
},
{
"cve": "CVE-2026-45762",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45762"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata\u0027s IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being processed. Under crafted fragmented IPv4/IPv6 traffic, an IPv6 fragment could be associated with an IPv4 defragmentation tracker. This can lead to a remote packet-triggered crash and denial of service when Suricata performs the relevant defragmentation. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, if using Suricata as an IDS with AF_PACKET, enabling AF_PACKET\u0027s `defrag` option may prevent Suricata from seeing such fragmented packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45762",
"url": "https://www.suse.com/security/cve/CVE-2026-45762"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45762"
},
{
"cve": "CVE-2026-45763",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45763"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, when Lua rule execution is enabled, the Lua sandbox memory limit was not consistently enforced for new allocations. Certain Lua allocation patterns could exceed `security.lua.max-bytes` without triggering the intended memory limit, making the configured sandbox limit unreliable. This requires Lua rules to be enabled and an affected Lua script/rule to be loaded. Version 8.0.5 contains a fix. As a workaround, disable `security.lua.allow-rules` unless Lua rules are required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45763",
"url": "https://www.suse.com/security/cve/CVE-2026-45763"
},
{
"category": "external",
"summary": "SUSE Bug 1280013 for CVE-2026-45763",
"url": "https://bugzilla.suse.com/1280013"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45763"
},
{
"cve": "CVE-2026-45764",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45764"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a protocol change while processing HTTP/2 traffic could lead to type confusion in Suricata. Crafted traffic may cause Suricata to crash, resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable HTTP/2 parsing if it is not required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45764",
"url": "https://www.suse.com/security/cve/CVE-2026-45764"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45764"
},
{
"cve": "CVE-2026-45765",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45765"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, DNP3 reassembly could buffer data without sufficient parser-level bounds. Crafted DNP3 traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable DNP3 (which is not enabled by default) if it is not needed, and/or define a limited `stream.reassembly.depth` (0 or absent is unlimited).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45765",
"url": "https://www.suse.com/security/cve/CVE-2026-45765"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45765"
},
{
"cve": "CVE-2026-45766",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45766"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, certain NFS parser state structures were insufficiently bounded. Crafted NFS traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable NFS application-layer parsing if it is not needed.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45766",
"url": "https://www.suse.com/security/cve/CVE-2026-45766"
},
{
"category": "external",
"summary": "SUSE Bug 1280616 for CVE-2026-45766",
"url": "https://bugzilla.suse.com/1280616"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-45766"
},
{
"cve": "CVE-2026-45767",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45767"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Preprocess `load`+ `save` rules to disallow absolute filenames for save, use Suricata\u0027s privilege dropping to limit writable files, and/or configure landlock in suricata.yaml.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45767",
"url": "https://www.suse.com/security/cve/CVE-2026-45767"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45767"
},
{
"cve": "CVE-2026-45768",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45768"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, LDAP transaction state could store an unbounded number of responses. Because LDAP can be processed over UDP, crafted traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Version 8.0.5 contains a fix. As a workaround, disable LDAP application-layer parsing where it is not required. Alternatively, use a rule like `alert ldap any any -\u003e any any (sid: 1; ldap.responses.count: \u003e1024; bypass;)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45768",
"url": "https://www.suse.com/security/cve/CVE-2026-45768"
},
{
"category": "external",
"summary": "SUSE Bug 1280614 for CVE-2026-45768",
"url": "https://bugzilla.suse.com/1280614"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-45768"
},
{
"cve": "CVE-2026-45769",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45769"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,IKEv2 parser state could grow without bounds while storing client transforms. Repeated crafted UDP traffic may cause Suricata to consume excessive memory, potentially resulting in denial of service. Versions 7.0.16 and 8.0.5 fix the issue. Some workarounds are available. Disable IKE application-layer parsing if it is not needed. Alternatively, use a rule to bypass ike flows after the first packets like `alert ike any any -\u003e any any (sid: 2; flow.pkts_toserver: \u003e 256; bypass; noalert;)`.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45769",
"url": "https://www.suse.com/security/cve/CVE-2026-45769"
},
{
"category": "external",
"summary": "SUSE Bug 1280615 for CVE-2026-45769",
"url": "https://bugzilla.suse.com/1280615"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-45769"
},
{
"cve": "CVE-2026-45770",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-45770"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata\u0027s restricted Lua sandbox. This requires an affected Lua script/rule to be loaded. Excessive flow variables being registered may also cause Suricata to crash. Version 8.0.5 contains a fix. As a workaround, disable `security.lua.allow-rules` unless Lua rules are required.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-45770",
"url": "https://www.suse.com/security/cve/CVE-2026-45770"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-45770"
},
{
"cve": "CVE-2026-46352",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46352"
}
],
"notes": [
{
"category": "general",
"text": "unknown",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46352",
"url": "https://www.suse.com/security/cve/CVE-2026-46352"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "moderate"
}
],
"title": "CVE-2026-46352"
},
{
"cve": "CVE-2026-46387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46387"
}
],
"notes": [
{
"category": "general",
"text": "Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata\u0027s HTTP/2 decompression path could grow the decompressed response-body buffer without an effective upper bound. A crafted HTTP/2 DATA payload using a high compression ratio, such as gzip, deflate, or brotli compressed data, could cause Suricata to allocate excessive memory while decompressing the payload. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, disable HTTP2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46387",
"url": "https://www.suse.com/security/cve/CVE-2026-46387"
},
{
"category": "external",
"summary": "SUSE Bug 1280014 for CVE-2026-46387",
"url": "https://bugzilla.suse.com/1280014"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:libsuricata8_0_5-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-8.0.5-1.1.x86_64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.aarch64",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.ppc64le",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.s390x",
"openSUSE Tumbleweed:suricata-devel-8.0.5-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-05-28T00:00:00Z",
"details": "important"
}
],
"title": "CVE-2026-46387"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…