https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-06T03:03:18.776091+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/CERTFR-2025-AVI-0572 CERTFR-2025-AVI-0572 — De multiples vulnérabilités ont été découvertes dans Suricata. Elles permettent à un attaquant de provoquer un problème… 2026-10-06T03:03:18.902374+00:00 CERTFR-2025-AVI-0572 https://vulnerability.circl.lu/vuln/bdu:2025-08912 bdu:2025-08912 2026-10-06T03:03:18.902457+00:00 bdu:2025-08912 https://vulnerability.circl.lu/vuln/fkie_cve-2025-53538 fkie_cve-2025-53538 2026-10-06T03:03:18.902479+00:00

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of visibility. Workarounds include disabling the HTTP/2 parser, and using a signature like drop http2 any any -> any any (frame:http2.hdr; byte_test:1,=,0,3; byte_test:4,=,0,5; sid: 1;) where the first byte test tests the HTTP2 frame type DATA and the second tests the stream id 0. This is fixed in versions 7.0.11 and 8.0.0.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-53538 UBUNTU-CVE-2025-53538 2026-10-06T03:03:18.902541+00:00

Affected: Ubuntu:16.04:LTS: suricata, Ubuntu:18.04:LTS: suricata, Ubuntu:22.04:LTS: suricata, Ubuntu:24.04:LTS: suricata, Ubuntu:25.10: suricata, Ubuntu:26.04:LTS: suricata

Suricata is a network IDS, IPS and NSM engine developed by the OISF (Open Information Security Foundation) and the Suricata community. In versions 7.0.10 and below and 8.0.0-beta1 through 8.0.0-rc1, mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory usage, leading to loss of visibility. Workarounds include disabling the HTTP/2 parser, and using a signature like drop http2 any any -> any any (frame:http2.hdr; byte_test:1,=,0,3; byte_test:4,=,0,5; sid: 1;) where the first byte test tests the HTTP2 frame type DATA and the second tests the stream id 0. This is fixed in versions 7.0.11 and 8.0.0.