CVE-2026-31933
Fixed in a distro release EPSS <1%CVSS 7.5
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, specially crafted traffic can cause Suricata to slow down, affecting performance in IDS mode. This issue has been patched in versions 7.0.15 and 8.0.4.
Products: OISF suricata
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | suricata | 1:7.0.10-1+deb13u4 |
| Debian 14 | suricata | 1:8.0.4-1 |
| Ubuntu 16.04 LTS | suricata | no fix |
| Ubuntu 18.04 LTS | suricata | no fix |
| Ubuntu 22.04 LTS | suricata | no fix |
| Ubuntu 24.04 LTS | suricata | no fix |
| Ubuntu 25.10 | suricata | no fix |
| Ubuntu 26.04 LTS | suricata | no fix |
| Ubuntu 26.10 | suricata | no fix |
| openSUSE Tumbleweed | suricata | 8.0.4-1.1 |