CVE-2025-29917
Suricata decode_base64: signature can do large memory allocation
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Suricata decode_base64: signature can do large memory allocation
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. The bytes setting in the decode_base64 keyword is not properly limited. Due to this, signatures using the keyword and setting can cause large memory allocations of up to 4 GiB per thread. This vulnerability is fixed in 7.0.9.
Reserved 2025-03-12 | Published 2025-04-10 | Updated 2025-04-11 | Assigner GitHub_MCWE-770: Allocation of Resources Without Limits or Throttling
github.com/...ricata/security/advisories/GHSA-x8c9-8553-j9px
github.com/...ommit/32d0bd2bbb4d486623dec85a94952fde2515f2f0
redmine.openinfosecfoundation.org/issues/7613
Support options
