Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-29916

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the `hashsize` to use. This size setting isn't properly limited, so the hash table allocation can be large. Untrusted rules can lead to large memory allocations, potentially leading to denial of service due to resource starvation. This vulnerability is fixed in 7.0.9.

Published

2025-04-10T20:15:23.733

Last Modified

2025-05-29T15:48:21.190

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.2 (MEDIUM)

Weaknesses

Type: Primary
CWE-770

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	oisf	suricata	< 7.0.9	Yes

References

https://github.com/OISF/suricata/commit/a7713db709b8a0be5fc5e5809ab58e9b14a16e85 Patch ([email protected])
https://github.com/OISF/suricata/security/advisories/GHSA-27g3-pmvp-j9cv Vendor Advisory ([email protected])
https://redmine.openinfosecfoundation.org/issues/7615 Permissions Required ([email protected])