CVE-2025-64333

Description

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.

PUBLISHED Reserved 2025-10-30 | Published 2025-11-26 | Updated 2025-11-28 | Assigner GitHub_M

Problem types

CWE-121: Stack-based Buffer Overflow

Product status

References

github.com/...ricata/security/advisories/GHSA-537h-xxmx-v87m

cve.org (CVE-2025-64333)

nvd.nist.gov (CVE-2025-64333)

Download JSON