CVE-2025-29916— Suricata 安全漏洞

Suricata datasets: ruleset declared settings can lead to resource starvation

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Datasets declared in rules have an option to specify the `hashsize` to use. This size setting isn't properly limited, so the hash table allocation can be large. Untrusted rules can lead to large memory allocations, potentially leading to denial of service due to resource starvation. This vulnerability is fixed in 7.0.9.

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

不加限制或调节的资源分配

Suricata 安全漏洞

Suricata是Open Information Security基金会的一个网络IDS、IPS和NSM引擎。 Suricata存在安全漏洞，该漏洞源于hashsize设置不当，可能导致拒绝服务。

N/A

N/A