Known vulnerabilities in Suricata - page 4

Software: Suricata
Software CPE: cpe:2.3:a:oisf:suricata:*:*:*:*:*:*:*:*
Total vulnerabilities: 103
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Suricata Suricata is affected by 103 known vulnerabilities: 9 high, 83 medium, 11 low Critical High Medium Low

Vulnerabilities (103)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105932 - Improper input validation
CVE-2025-29918
CWE-20 Medium
No
No
7.0.9 21.03.2025 SB2025032122
SB2025032601
SB2025032602
and 3 more
#VU105933 - Improper input validation
CVE-2025-29916
CWE-20 Medium
No
No
7.0.9 21.03.2025 SB2025032122
SB2025032601
SB2025032602
and 3 more
#VU102518 - Stack-based buffer overflow
CVE-2024-55605
CWE-121 Medium
No
No
7.0.8 10.01.2025 SB2025011002
SB2025011004
SB2025011005
and 3 more
#VU102517 - Memory corruption
CVE-2024-55626
CWE-119 Low
No
No
7.0.8 10.01.2025 SB2025011002
SB2025011004
SB2025011005
and 2 more
#VU102516 - Integer underflow
CVE-2024-55627
CWE-191 Medium
No
No
7.0.8 10.01.2025 SB2025011002
SB2025011004
SB2025011005
and 3 more
#VU102515 - Asymmetric Resource Consumption (Amplification)
CVE-2024-55628
CWE-405 Medium
No
No
7.0.8 10.01.2025 SB2025011002
SB2025011004
SB2025011005
and 4 more
#VU102514 - Improper input validation
CVE-2024-55629
CWE-20 Medium
No
No
7.0.8 10.01.2025 SB2025011002
SB2025011004
SB2025011005
and 4 more
#VU128036 - Use of Insufficiently Random Values
CVE-2024-47188
CWE-330 Medium
No
No
7.0.7 16.10.2024 SB20241016113
#VU128038 - Reachable Assertion
CVE-2024-47522
CWE-617 Medium
No
No
7.0.7 16.10.2024 SB20241016113
#VU128037 - Use of Insufficiently Random Values
CVE-2024-47187
CWE-330 Medium
No
No
7.0.7 16.10.2024 SB20241016113
#VU128039 - Off-by-one Error
CVE-2024-45796
CWE-193 Medium
No
No
7.0.7 16.10.2024 SB20241016113
#VU128040 - Reachable Assertion
CVE-2024-45795
CWE-617 Medium
No
No
7.0.7 16.10.2024 SB20241016113
#VU128041 - NULL Pointer Dereference
CVE-2024-38536
CWE-476 Medium
No
No
7.0.6 11.07.2024 SB20240711247
#VU128042 - Allocation of Resources Without Limits or Throttling
CVE-2024-38534
CWE-770 Medium
No
No
7.0.6 11.07.2024 SB20240711247
#VU128043 - Allocation of Resources Without Limits or Throttling
CVE-2024-38535
CWE-770 Medium
No
No
6.0.20, 7.0.6 11.07.2024 SB20240711247
#VU128044 - Always-Incorrect Control Flow Implementation
CVE-2024-37151
CWE-670 Medium
No
No
6.0.20, 7.0.6 11.07.2024 SB20240711247
#VU128047 - Allocation of Resources Without Limits or Throttling
CVE-2024-32663
CWE-770 Medium
No
No
6.0.19, 7.0.5 07.05.2024 SB2024050750
#VU128046 - Heap-based Buffer Overflow
CVE-2024-32664
CWE-122 Medium
No
No
6.0.19, 7.0.5 07.05.2024 SB2024050750
#VU128045 - Always-Incorrect Control Flow Implementation
CVE-2024-32867
CWE-670 Medium
No
No
6.0.19, 7.0.5 07.05.2024 SB2024050750
#VU128048 - Allocation of Resources Without Limits or Throttling
CVE-2024-28870
CWE-770 Medium
No
No
6.0.17, 7.0.4 02.04.2024 SB2024040268


Showing elements 61 - 80 out of 103