https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:51:02 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0614 certfr-2026-avi-0614 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0614 https://cve.radiocsirt.org/vuln/euvd-2026-367107 EUVD-2026-367107 https://cve.radiocsirt.org/vuln/euvd-2026-367107 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45762 <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata&#39;s IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being processed. Under crafted fragmented IPv4/IPv6 traffic, an IPv6 fragment could be associated with an IPv4 defragmentation tracker. This can lead to a remote packet-triggered crash and denial of service when Suricata performs the relevant defragmentation. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, if using Suricata as an IDS with AF_PACKET, enabling AF_PACKET&#39;s `defrag` option may prevent Suricata from seeing such fragmented packets.</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata&#39;s IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being processed. Under crafted fragmented IPv4/IPv6 traffic, an IPv6 fragment could be associated with an IPv4 defragmentation tracker. This can lead to a remote packet-triggered crash and denial of service when Suricata performs the relevant defragmentation. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, if using Suricata as an IDS with AF_PACKET, enabling AF_PACKET&#39;s `defrag` option may prevent Suricata from seeing such fragmented packets.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45762 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10885-1 <p>libsuricata8_0_5-8.0.5-1.1 on GA media</p> <p>libsuricata8_0_5-8.0.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10885-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45762 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata, Ubuntu:22.04:LTS: suricata, Ubuntu:24.04:LTS: suricata, Ubuntu:26.04:LTS: suricata</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata&#39;s IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being processed. Under crafted fragmented IPv4/IPv6 traffic, an IPv6 fragment could be associated with an IPv4 defragmentation tracker. This can lead to a remote packet-triggered crash and denial of service when Suricata performs the relevant defragmentation. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, if using Suricata as an IDS with AF_PACKET, enabling AF_PACKET&#39;s `defrag` option may prevent Suricata from seeing such fragmented packets.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata, Ubuntu:22.04:LTS: suricata, Ubuntu:24.04:LTS: suricata, Ubuntu:26.04:LTS: suricata</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata&#39;s IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being processed. Under crafted fragmented IPv4/IPv6 traffic, an IPv6 fragment could be associated with an IPv4 defragmentation tracker. This can lead to a remote packet-triggered crash and denial of service when Suricata performs the relevant defragmentation. Versions 7.0.16 and 8.0.5 contain a fix. As a workaround, if using Suricata as an IDS with AF_PACKET, enabling AF_PACKET&#39;s `defrag` option may prevent Suricata from seeing such fragmented packets.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45762