CVE-2025-64334

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2. A workaround involves disabling LZMA decompression or limiting response-body-limit size.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/OISF/suricata/commit/00f04daa3a44928dfdd0003cb9735469272c94a1	Patch
https://github.com/OISF/suricata/security/advisories/GHSA-r5jf-v2gx-gx8w	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Suricata es un motor IDS, IPS y NSM de red desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. En versiones desde la 8.0.0 hasta la 8.0.2, los datos HTTP comprimidos pueden provocar un crecimiento ilimitado de la memoria durante la descompresión. Este problema ha sido parcheado en la versión 8.0.2. Una solución alternativa implica deshabilitar la descompresión LZMA o limitar el tamaño de 'response-body-limit'.

Information

Published : 2025-11-26 23:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-64334

Mitre link : CVE-2025-64334

CVE.ORG link : CVE-2025-64334

JSON object : View

Products Affected

oisf

suricata

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2025-64334", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-64334", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-28T17:04:40.959387Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "OISF", "product": "suricata", "versions": [{"status": "affected", "version": ">= 8.0.0, < 8.0.2"}]}]}], "published": "2025-11-26T23:15:48.750", "references": [{"url": "https://github.com/OISF/suricata/commit/00f04daa3a44928dfdd0003cb9735469272c94a1", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/OISF/suricata/security/advisories/GHSA-r5jf-v2gx-gx8w", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions from 8.0.0 to before 8.0.2, compressed HTTP data can lead to unbounded memory growth during decompression. This issue has been patched in version 8.0.2. A workaround involves disabling LZMA decompression or limiting response-body-limit size."}, {"lang": "es", "value": "Suricata es un motor IDS, IPS y NSM de red desarrollado por la OISF (Open Information Security Foundation) y la comunidad de Suricata. En versiones desde la 8.0.0 hasta la 8.0.2, los datos HTTP comprimidos pueden provocar un crecimiento ilimitado de la memoria durante la descompresi\u00f3n. Este problema ha sido parcheado en la versi\u00f3n 8.0.2. Una soluci\u00f3n alternativa implica deshabilitar la descompresi\u00f3n LZMA o limitar el tama\u00f1o de 'response-body-limit'."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C93A731C-19AD-4067-B28C-17164C2D981D", "versionEndExcluding": "8.0.2", "versionStartIncluding": "8.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}