Improper Output Neutralization for Logs in Suricata - #VU152926
Published: September 30, 2026
Vulnerability identifier: #VU152926
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-117
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to corrupt PostgreSQL event and alert records.
The vulnerability exists due to improper output neutralization for logs in PostgreSQL EVE JSON logging when processing crafted backend responses ending in a ParameterStatus message. A remote attacker can send a crafted backend response to corrupt PostgreSQL event and alert records.
Unbalanced EVE JSON can disrupt downstream log processing.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7