https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 07:27:18 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0859 certfr-2026-avi-0859 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0859 https://cve.radiocsirt.org/vuln/euvd-2026-372419 EUVD-2026-372419 https://cve.radiocsirt.org/vuln/euvd-2026-372419 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57224 <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::for_direction(), so a sensor that observes only one direction cannot mark the unseen direction inspected or free completed transactions. The RDP parser in rust/src/rdp/rdp.rs has the same direction-state defect. The per-flow transaction list can grow without bound and cleanup repeatedly scans it, causing increasing CPU and memory consumption and eventual denial of service. This issue is fixed in version 8.0.6.</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::for_direction(), so a sensor that observes only one direction cannot mark the unseen direction inspected or free completed transactions. The RDP parser in rust/src/rdp/rdp.rs has the same direction-state defect. The per-flow transaction list can grow without bound and cleanup repeatedly scans it, causing increasing CPU and memory consumption and eventual denial of service. This issue is fixed in version 8.0.6.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57224 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11308-1 <p>libsuricata8_0_6-8.0.6-1.1 on GA media</p> <p>libsuricata8_0_6-8.0.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11308-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57224 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata, Ubuntu:22.04:LTS: suricata, Ubuntu:24.04:LTS: suricata, Ubuntu:26.04:LTS: suricata</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::for_direction(), so a sensor that observes only one direction cannot mark the unseen direction inspected or free completed transactions. The RDP parser in rust/src/rdp/rdp.rs has the same direction-state defect. The per-flow transaction list can grow without bound and cleanup repeatedly scans it, causing increasing CPU and memory consumption and eventual denial of service. This issue is fixed in version 8.0.6.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata, Ubuntu:22.04:LTS: suricata, Ubuntu:24.04:LTS: suricata, Ubuntu:26.04:LTS: suricata</p> <p>Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions without recording their packet direction with AppLayerTxData::for_direction(), so a sensor that observes only one direction cannot mark the unseen direction inspected or free completed transactions. The RDP parser in rust/src/rdp/rdp.rs has the same direction-state defect. The per-flow transaction list can grow without bound and cleanup repeatedly scans it, causing increasing CPU and memory consumption and eventual denial of service. This issue is fixed in version 8.0.6.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-57224