Fluid Attacks Database

Description

Suricata is a network IDS, IPS and NSM engine. Starting in version 8.0.0 and prior to version 8.0.3, Suricata can crash with a stack overflow. Version 8.0.3 patches the issue. As a workaround, use default values for request-body-limit and response-body-limit.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 14	suricata	=1:7.0.10-1 \|\| =1:7.0.11-1 \|\| =1:7.0.11-1~bpo13+1 \|\| =1:8.0.0-1~exp1 \|\| =1:8.0.0-1~exp2 \|\| =1:8.0.0-1~exp4 \|\| =1:8.0.0-1~exp5 \|\| =1:8.0.1-1 \|\| =1:8.0.1-2 \|\| =1:8.0.1-3 \|\| =1:8.0.1-3~bpo13+1 \|\| =1:8.0.2-1 \|\| =1:8.0.2-1~bpo13+1 \|\| =1:8.0.3-1~bpo13+1 \|\| >=0 <1:8.0.3-1	1:8.0.3-1

Aliases

1. CVE-2026-222602. NVD-2026-222603. OSV-DEBIAN-2026-222604. OSV-2026-222605. SECURITY-TRACKER-CVE-2026-22260

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.