CVE-2025-64331

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if the user has increased the HTTP response body limit and enabled the logging of printable http bodies. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves using default HTTP response body limits and/or disabling http-body-printable logging; body logging is disabled by default.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/OISF/suricata/security/advisories/GHSA-v32w-j79x-pfj2	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:oisf:suricata::::::::
	cpe:2.3:a:oisf:suricata::::::::

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Suricata es un motor IDS, IPS y NSM de red desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. Versiones anteriores a las versiones 7.0.13 y 8.0.2, puede ocurrir un desbordamiento de pila en transferencias de archivos HTTP grandes si el usuario ha aumentado el límite del cuerpo de respuesta HTTP y ha habilitado el registro de cuerpos HTTP imprimibles. Este problema ha sido parcheado en las versiones 7.0.13 y 8.0.2. Una solución alternativa para este problema implica usar los límites predeterminados del cuerpo de respuesta HTTP y/o deshabilitar el registro de cuerpos HTTP imprimibles; el registro de cuerpos está deshabilitado por defecto.

Information

Published : 2025-11-26 23:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-64331

Mitre link : CVE-2025-64331

CVE.ORG link : CVE-2025-64331

JSON object : View

Products Affected

oisf

suricata

CWE

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-64331", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64331", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-28T15:37:52.086451Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "OISF", "product": "suricata", "versions": [{"status": "affected", "version": "< 7.0.13"}, {"status": "affected", "version": "< 8.0.2"}]}]}], "published": "2025-11-26T23:15:48.263", "references": [{"url": "https://github.com/OISF/suricata/security/advisories/GHSA-v32w-j79x-pfj2", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a stack overflow can occur on large HTTP file transfers if the user has increased the HTTP response body limit and enabled the logging of printable http bodies. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves using default HTTP response body limits and/or disabling http-body-printable logging; body logging is disabled by default."}, {"lang": "es", "value": "Suricata es un motor IDS, IPS y NSM de red desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. Versiones anteriores a las versiones 7.0.13 y 8.0.2, puede ocurrir un desbordamiento de pila en transferencias de archivos HTTP grandes si el usuario ha aumentado el l\u00edmite del cuerpo de respuesta HTTP y ha habilitado el registro de cuerpos HTTP imprimibles. Este problema ha sido parcheado en las versiones 7.0.13 y 8.0.2. Una soluci\u00f3n alternativa para este problema implica usar los l\u00edmites predeterminados del cuerpo de respuesta HTTP y/o deshabilitar el registro de cuerpos HTTP imprimibles; el registro de cuerpos est\u00e1 deshabilitado por defecto."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AA4D86E3-44A3-4B0B-9CF4-9FC88091D3C1", "versionEndExcluding": "7.0.13"}, {"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C93A731C-19AD-4067-B28C-17164C2D981D", "versionEndExcluding": "8.0.2", "versionStartIncluding": "8.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}