Allocation of Resources Without Limits or Throttling in Suricata - #VU162659
Published: November 9, 2026
Vulnerability identifier: #VU162659
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-770
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to exhaust Suricata's memory and degrade packet processing.
The vulnerability exists due to unbounded data queuing in Suricata's NFS application-layer parser when it inspects out-of-order read or write data chunks. An unauthenticated remote attacker can send crafted NFS traffic through an inspected network to cause excessive memory consumption, reducing inspection visibility and limiting availability when Suricata operates in inline mode.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7