Description
Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. Prior to versions 7.0.13 and 8.0.2, a large HTTP content type, when logged can cause a stack overflow crashing Suricata. This issue has been patched in versions 7.0.13 and 8.0.2. A workaround for this issue involves limiting stream.reassembly.depth to less then half the stack size. Increasing the process stack size makes it less likely the bug will trigger.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 debian 11 | | =1:6.0.1-3 || =1:6.0.1-3+deb11u1 || =1:6.0.10-1 || =1:6.0.10-1~bpo11+1 || =1:6.0.13-1 || =1:6.0.2-1~exp1 || =1:6.0.3-1 || =1:6.0.3-1~exp1 || =1:6.0.3-1~exp2 || =1:6.0.3-2 || =1:6.0.3-2~bpo11+1 || =1:6.0.4-1 || =1:6.0.4-2 || =1:6.0.4-2~bpo10+1 || =1:6.0.4-2~bpo11+1 || =1:6.0.4-3 || =1:6.0.5-1 || =1:6.0.5-2 || =1:6.0.5-2~bpo10+1 || =1:6.0.5-2~bpo11+1 || =1:6.0.5-3 || =1:6.0.6-1 || =1:6.0.6-1~bpo10+1 || =1:6.0.6-1~bpo11+1 || =1:6.0.6-2 || =1:6.0.8-1 || =1:6.0.8-1~bpo11+1 || =1:6.0.9-1 || =1:6.0.9-1~bpo11+1 || =1:7.0.0-1 || =1:7.0.0-2 || =1:7.0.0-2~bpo12+1 || =1:7.0.1-1 || =1:7.0.10-1 || =1:7.0.10-1~bpo12+1 || =1:7.0.11-1 || =1:7.0.11-1~bpo13+1 || =1:7.0.2-1 || =1:7.0.2-1~bpo12+1 || =1:7.0.2-2 || =1:7.0.2-2~exp1 || =1:7.0.2-2~exp2 || =1:7.0.3-1 || =1:7.0.3-1~bpo12+1 || =1:7.0.4-1 || =1:7.0.5-1 || =1:7.0.5-2~bpo12+1 || =1:7.0.6-1 || =1:7.0.6-1~bpo12+1 || =1:7.0.6-2~exp1 || =1:7.0.7-1 || =1:7.0.7-1~bpo12+1 || =1:7.0.8-1 || =1:7.0.8-1~bpo12+1 || =1:7.0.8-2 || =1:7.0.9-1 || =1:8.0.0-1~exp1 || =1:8.0.0-1~exp2 || =1:8.0.0-1~exp4 || =1:8.0.0-1~exp5 || =1:8.0.1-1 || =1:8.0.1-2 || =1:8.0.1-3 || =1:8.0.1-3~bpo13+1 || =1:8.0.2-1 || =1:8.0.2-1~bpo13+1 || =1:8.0.3-1 || =1:8.0.3-1~bpo13+1 || =1:8.0.3-2~exp1 || =1:8.0.4-1 || =1:8.0.4-1~bpo13+1 | - |
debian 13 | | =1:7.0.10-1 || =1:7.0.10-1+deb13u1 || >=0 <1:7.0.10-1+deb13u2 | 1:7.0.10-1+deb13u2 |
debian 14 | | =1:7.0.10-1 || =1:7.0.11-1 || =1:7.0.11-1~bpo13+1 || =1:8.0.0-1~exp1 || =1:8.0.0-1~exp2 || =1:8.0.0-1~exp4 || =1:8.0.0-1~exp5 || =1:8.0.1-1 || =1:8.0.1-2 || =1:8.0.1-3 || =1:8.0.1-3~bpo13+1 || =1:8.0.2-1~bpo13+1 || >=0 <1:8.0.2-1 | 1:8.0.2-1 |
