Allocation of Resources Without Limits or Throttling in Suricata - #VU162668
Published: November 9, 2026
Vulnerability identifier: #VU162668
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-770
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an unauthenticated remote attacker to amplify memory consumption and degrade Suricata's availability.
The vulnerability exists due to unbounded allocation in Suricata's default-enabled MQTT v5 property parser when unknown property identifiers are treated as having zero-length values. An unauthenticated remote attacker can send crafted MQTT messages through monitored traffic to retain tens of megabytes per transaction and drive memory usage toward exhaustion across concurrent flows.
Affected software
Suricata
Remediation
Install security update from vendor's website.
Suricata - update to 8.0.7