Allocation of Resources Without Limits or Throttling in Suricata - #VU162661
Published: November 9, 2026
Vulnerability identifier: #VU162661
CSH Severity: Medium
CVSS v4: 8.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-770
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to exhaust Suricata's memory and degrade packet processing.
The vulnerability exists due to unbounded retention of repeated nonterminal server responses by Suricata's PostgreSQL parser when PostgreSQL parsing is enabled. An unauthenticated remote attacker can send these responses from a malicious or compromised PostgreSQL server through monitored traffic, limiting visibility and availability in inline mode.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7