CVE-2026-22263
Fixed in a distro release EPSS <1%CVSS 5.3
Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, inefficiency in http1 headers parsing can lead to slowdown over multiple packets. Version 8.0.3 patches the issue. No known workarounds are available.
Products: OISF suricata
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | suricata | 1:8.0.3-1 |
| Ubuntu 16.04 LTS | suricata | no fix |
| Ubuntu 18.04 LTS | suricata | no fix |
| Ubuntu 22.04 LTS | suricata | no fix |
| Ubuntu 24.04 LTS | suricata | no fix |
| Ubuntu 25.10 | suricata | no fix |
| openSUSE Tumbleweed | suricata | 8.0.3-1.1 |