CVE-2026-31935
Fixed in a distro release EPSS <1%CVSS 7.5
Suricata is a network IDS, IPS and NSM engine. Prior to versions 7.0.15 and 8.0.4, flooding of craft HTTP2 continuation frames can lead to memory exhaustion, usually resulting in the Suricata process being shut down by the operating system. This issue has been patched in versions 7.0.15 and 8.0.4.
Products: OISF suricata
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 13 | suricata | 1:7.0.10-1+deb13u4 |
| Debian 14 | suricata | 1:8.0.4-1 |
| Ubuntu 16.04 LTS | suricata | no fix |
| Ubuntu 18.04 LTS | suricata | no fix |
| Ubuntu 22.04 LTS | suricata | no fix |
| Ubuntu 24.04 LTS | suricata | no fix |
| Ubuntu 25.10 | suricata | no fix |
| Ubuntu 26.04 LTS | suricata | no fix |
| Ubuntu 26.10 | suricata | no fix |
| openSUSE Tumbleweed | suricata | 8.0.4-1.1 |