CVE Notifier

CVE-2026-63451 CWE-122 3.3

Suricata detect: frame rules without content and with transform can cause heap buffer overflow during rule load

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, a locally supplied detection rule that combines frame inspection without conte…

cve.org OISF:suricata 23 jam lalu

CVE-2026-57227 CWE-400 7.5

Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or…

cve.org OISF:suricata 23 jam lalu

CVE-2026-63450 CWE-755 3.7

Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT o…

cve.org OISF:suricata 23 jam lalu

CVE-2026-93562 CWE-1035 6.5

Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling

A flaw was found in Netty's HTTP/1 decoder. Incomplete validation of malformed Transfer-Encoding headers allows a remote attacker to perform HTTP request smuggling. By sending specially crafted HTTP requests, an attacker…

cve.org Red · Hat:Red · Hat 23 jam lalu

CVE-2026-93574 CWE-444 6.5

Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing

A flaw was found in Netty's `netty-codec-http` component. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP/1.1 chunk-size token that includes post-digit whitespace. This incorrect pa…

cve.org Red · Hat:Red · Hat 23 jam lalu

CVE-2026-63449 CWE-197 3.7

Suricata sip: large SIP message bodies can evade detection with frame keyword

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the SIP parser in rust/src/sip/parser.rs stores request and response body leng…

cve.org OISF:suricata 23 jam lalu

CVE-2026-57228 CWE-125 8.2

Suricata smtp/mime: heap out-of-bounds read quoted-printable decoder

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.13 until 7.0.17, the SMTP MIME quoted-printable decoder in src/util-decode-mime.c can read on…

cve.org OISF:suricata 23 jam lalu

CVE-2026-57224 CWE-400 6.5

Suricata dhcp: unbounded transactions in unidirectional traffic can lead to resource exhaustion

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 8.0.0 until 8.0.6, the DHCP parser in rust/src/dhcp/dhcp.rs creates stateless transactions withou…

cve.org OISF:suricata 23 jam lalu

CVE-2026-57226 CWE-122 3.7

Suricata swf: heap buffer overflow in SWF decompression depth handling

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, HTTP SWF decompression with the non-default swf-decompression feature and a…

cve.org OISF:suricata 23 jam lalu

CVE-2026-57222 CWE-697 5.3

Suricata ippair: hash collision can cause incorrect state reuse across IPv4 and IPv6

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 7.0.17 and 8.0.6, crafted IPv4 and IPv6 address pairs can collide in the IPPair hash because …

cve.org OISF:suricata 23 jam lalu

CVE-2026-61720 CWE-191 6.2

FluidSynth: SF2 DMOD Chunk Unsigned Underflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the SF2 parser computes the DMOD modulator count as chunk.size / SF_MOD_SIZE - 1 without rejecting chunks smaller than…

cve.org FluidSynth:fluidsynth 23 jam lalu

CVE-2026-61723 CWE-190 6.8

FluidSynth: DLS ptbl Chunk Integer Overflow

FluidSynth is a software synthesizer based on the SoundFont 2 specifications. From 2.5.0 until 2.5.6, the native DLS parser validates ptbl chunks with the unsigned expression cues * 4 + cbsize without checking whether th…

cve.org FluidSynth:fluidsynth 23 jam lalu