Allocation of Resources Without Limits or Throttling in Suricata - #VU162660
Published: November 9, 2026
Vulnerability identifier: #VU162660
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-770
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to exhaust Suricata's memory and potentially terminate the process, resulting in denial of service.
The vulnerability exists due to unbounded data queuing in Suricata's SMB1 parser when processing crafted out-of-order read or write data chunks. An unauthenticated remote attacker can send these chunks in traffic inspected by Suricata to consume memory when SMB parsing is enabled.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7